0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf8000000) 04:41:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x30, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2930.717415][ C1] sd 0:0:1:0: tag#6252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2930.726462][ C1] sd 0:0:1:0: tag#6252 CDB[20]: ba [ 2930.740911][T26019] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x41, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200070000000006040000000000000000", 0x39}], 0x1) 04:41:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8d00000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1100, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200080000000006040000000000000000", 0x39}], 0x1) 04:41:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3d010000) 04:41:28 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf8010000) 04:41:28 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xee010000) 04:41:28 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1f00, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x3000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200090000000006040000000000000000", 0x39}], 0x1) [ 2931.572351][ C1] sd 0:0:1:0: tag#6253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2931.582238][ C1] sd 0:0:1:0: tag#6253 CDB: opcode=0xe5 (vendor) [ 2931.588594][ C1] sd 0:0:1:0: tag#6253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2931.597898][ C1] sd 0:0:1:0: tag#6253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2931.606952][ C1] sd 0:0:1:0: tag#6253 CDB[20]: ba 04:41:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xee020000) 04:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000a0000000006040000000000000000", 0x39}], 0x1) 04:41:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x4000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2931.749791][ C0] sd 0:0:1:0: tag#6254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2931.759675][ C0] sd 0:0:1:0: tag#6254 CDB: opcode=0xe5 (vendor) [ 2931.766021][ C0] sd 0:0:1:0: tag#6254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2931.775065][ C0] sd 0:0:1:0: tag#6254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2931.784109][ C0] sd 0:0:1:0: tag#6254 CDB[20]: ba 04:41:29 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8e00000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:29 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3d020000) 04:41:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xef000000) 04:41:29 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf8020000) 04:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000b0000000006040000000000000000", 0x39}], 0x1) 04:41:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x4100, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x8fff, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000c0000000006040000000000000000", 0x39}], 0x1) 04:41:29 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf9000000) [ 2932.460867][ C1] sd 0:0:1:0: tag#6255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2932.470787][ C1] sd 0:0:1:0: tag#6255 CDB: opcode=0xe5 (vendor) [ 2932.477154][ C1] sd 0:0:1:0: tag#6255 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2932.486194][ C1] sd 0:0:1:0: tag#6255 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2932.495341][ C1] sd 0:0:1:0: tag#6255 CDB[20]: ba 04:41:29 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xff8f, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xef010000) 04:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000d0000000006040000000000000000", 0x39}], 0x1) 04:41:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8f00000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x20010, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3e000000) 04:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000e0000000006040000000000000000", 0x39}], 0x1) 04:41:30 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf9010000) 04:41:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xef020000) 04:41:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x20200, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2933.299448][ C0] sd 0:0:1:0: tag#6256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2933.309331][ C0] sd 0:0:1:0: tag#6256 CDB: opcode=0xe5 (vendor) [ 2933.315691][ C0] sd 0:0:1:0: tag#6256 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2933.324814][ C0] sd 0:0:1:0: tag#6256 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2933.333869][ C0] sd 0:0:1:0: tag#6256 CDB[20]: ba 04:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200100000000006040000000000000000", 0x39}], 0x1) 04:41:30 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x80000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf0000000) 04:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200110000000006040000000000000000", 0x39}], 0x1) 04:41:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200120000000006040000000000000000", 0x39}], 0x1) 04:41:31 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3e010000) 04:41:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x101000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:31 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf9020000) 04:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200160000000006040000000000000000", 0x39}], 0x1) 04:41:31 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf0010000) 04:41:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x300000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200170000000006040000000000000000", 0x39}], 0x1) [ 2934.187608][ C0] sd 0:0:1:0: tag#6257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2934.197493][ C0] sd 0:0:1:0: tag#6257 CDB: opcode=0xe5 (vendor) [ 2934.203853][ C0] sd 0:0:1:0: tag#6257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2934.212885][ C0] sd 0:0:1:0: tag#6257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2934.221900][ C0] sd 0:0:1:0: tag#6257 CDB[20]: ba 04:41:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3e020000) 04:41:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf0ff1f, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200180000000006040000000000000000", 0x39}], 0x1) 04:41:31 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2934.409621][ C0] sd 0:0:1:0: tag#6258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2934.419578][ C0] sd 0:0:1:0: tag#6258 CDB: opcode=0xe5 (vendor) [ 2934.425975][ C0] sd 0:0:1:0: tag#6258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2934.435007][ C0] sd 0:0:1:0: tag#6258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2934.444046][ C0] sd 0:0:1:0: tag#6258 CDB[20]: ba 04:41:32 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x900e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:32 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf0020000) 04:41:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200190000000006040000000000000000", 0x39}], 0x1) 04:41:32 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfa000000) 04:41:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x4000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:32 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f000000) [ 2935.077032][T26370] validate_nla: 58 callbacks suppressed [ 2935.077046][T26370] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.103824][T26370] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.105258][ C0] sd 0:0:1:0: tag#6259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 04:41:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x10000200, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2935.121774][ C0] sd 0:0:1:0: tag#6259 CDB: opcode=0xe5 (vendor) [ 2935.128135][ C0] sd 0:0:1:0: tag#6259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2935.129417][T26370] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.137205][ C0] sd 0:0:1:0: tag#6259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2935.154318][ C0] sd 0:0:1:0: tag#6259 CDB[20]: ba 04:41:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x11000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2935.210389][T26375] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1f000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002004e0000000006040000000000000000", 0x39}], 0x1) 04:41:32 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfa010000) 04:41:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1ffff000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2935.338287][T26399] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.367081][T26399] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.399215][T26399] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.419558][T26413] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x40000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:33 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9100000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f010000) 04:41:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf1000000) 04:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200500000000006040000000000000000", 0x39}], 0x1) 04:41:33 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfa020000) [ 2935.940397][T26436] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2935.958694][ C0] sd 0:0:1:0: tag#6260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2935.968544][ C0] sd 0:0:1:0: tag#6260 CDB: opcode=0xe5 (vendor) [ 2935.974909][ C0] sd 0:0:1:0: tag#6260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 04:41:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x41000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2935.984192][ C0] sd 0:0:1:0: tag#6260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2935.993362][ C0] sd 0:0:1:0: tag#6260 CDB[20]: ba [ 2936.011385][T26449] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200520000000006040000000000000000", 0x39}], 0x1) 04:41:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf1010000) 04:41:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f020000) 04:41:33 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfb000000) 04:41:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200540000000006040000000000000000", 0x39}], 0x1) 04:41:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf0ffffff, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2936.264485][ C1] sd 0:0:1:0: tag#6261 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2936.274427][ C1] sd 0:0:1:0: tag#6261 CDB: opcode=0xe5 (vendor) [ 2936.280776][ C1] sd 0:0:1:0: tag#6261 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2936.289857][ C1] sd 0:0:1:0: tag#6261 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2936.298897][ C1] sd 0:0:1:0: tag#6261 CDB[20]: ba 04:41:33 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf5ffffff, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:34 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9200000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200580000000006040000000000000000", 0x39}], 0x1) 04:41:34 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfb010000) 04:41:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xfbffffff, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:34 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf1020000) 04:41:34 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x40000000) 04:41:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xff8f0000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002005e0000000006040000000000000000", 0x39}], 0x1) 04:41:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xffffff7f, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2936.849087][ C1] sd 0:0:1:0: tag#6262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2936.859039][ C1] sd 0:0:1:0: tag#6262 CDB: opcode=0xe5 (vendor) [ 2936.865403][ C1] sd 0:0:1:0: tag#6262 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2936.874474][ C1] sd 0:0:1:0: tag#6262 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2936.883526][ C1] sd 0:0:1:0: tag#6262 CDB[20]: ba 04:41:34 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfb020000) 04:41:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200600000000006040000000000000000", 0x39}], 0x1) 04:41:34 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xfffffff0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9300000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:35 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x40010000) 04:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200620000000006040000000000000000", 0x39}], 0x1) 04:41:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xfffffff5, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:35 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf2000000) 04:41:35 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfc000000) 04:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fc0000000006040000000000000000", 0x39}], 0x1) 04:41:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xfffffffb, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2937.710038][ C0] sd 0:0:1:0: tag#6263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2937.720280][ C0] sd 0:0:1:0: tag#6263 CDB: opcode=0xe5 (vendor) [ 2937.726664][ C0] sd 0:0:1:0: tag#6263 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2937.735704][ C0] sd 0:0:1:0: tag#6263 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2937.744745][ C0] sd 0:0:1:0: tag#6263 CDB[20]: ba 04:41:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x100000800, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fd0000000006040000000000000000", 0x39}], 0x1) 04:41:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1b0e21f000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000300000006040000000000000000", 0x39}], 0x1) 04:41:35 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9400000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:35 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x29add7d1e000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000500000006040000000000000000", 0x39}], 0x1) 04:41:35 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfc010000) 04:41:35 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf2010000) 04:41:35 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x40020000) 04:41:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x553a2539e000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000600000006040000000000000000", 0x39}], 0x1) [ 2938.615373][ C1] sd 0:0:1:0: tag#6264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2938.625350][ C1] sd 0:0:1:0: tag#6264 CDB: opcode=0xe5 (vendor) [ 2938.631702][ C1] sd 0:0:1:0: tag#6264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2938.640748][ C1] sd 0:0:1:0: tag#6264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2938.649798][ C1] sd 0:0:1:0: tag#6264 CDB[20]: ba 04:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000700000006040000000000000000", 0x39}], 0x1) 04:41:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x2001000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x41000000) 04:41:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x2020000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2938.860006][ C1] sd 0:0:1:0: tag#6265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2938.869983][ C1] sd 0:0:1:0: tag#6265 CDB: opcode=0xe5 (vendor) [ 2938.876342][ C1] sd 0:0:1:0: tag#6265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2938.885402][ C1] sd 0:0:1:0: tag#6265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2938.894462][ C1] sd 0:0:1:0: tag#6265 CDB[20]: ba 04:41:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9500000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:36 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfc020000) 04:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000900000006040000000000000000", 0x39}], 0x1) 04:41:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf2020000) 04:41:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x8000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x41010000) [ 2939.467473][ C1] sd 0:0:1:0: tag#6266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2939.477349][ C1] sd 0:0:1:0: tag#6266 CDB: opcode=0xe5 (vendor) [ 2939.483759][ C1] sd 0:0:1:0: tag#6266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2939.492837][ C1] sd 0:0:1:0: tag#6266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2939.501868][ C1] sd 0:0:1:0: tag#6266 CDB[20]: ba 04:41:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000a00000006040000000000000000", 0x39}], 0x1) 04:41:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x8000001000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf3000000) 04:41:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfd000000) 04:41:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x10100000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000b00000006040000000000000000", 0x39}], 0x1) 04:41:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9600000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x30000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000c00000006040000000000000000", 0x39}], 0x1) 04:41:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfd010000) 04:41:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf3010000) 04:41:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x41020000) 04:41:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xe039253a550000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2940.352507][T26862] validate_nla: 62 callbacks suppressed [ 2940.352594][T26862] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.378967][T26862] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.389545][ C1] sd 0:0:1:0: tag#6267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2940.399484][ C1] sd 0:0:1:0: tag#6267 CDB: opcode=0xe5 (vendor) [ 2940.405840][ C1] sd 0:0:1:0: tag#6267 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2940.414909][ C1] sd 0:0:1:0: tag#6267 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2940.423946][ C1] sd 0:0:1:0: tag#6267 CDB[20]: ba [ 2940.440353][T26862] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.449450][T26882] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000d00000006040000000000000000", 0x39}], 0x1) 04:41:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf3020000) 04:41:37 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xe0d1d7ad290000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfd020000) 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf0210e1b000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2940.534721][T26899] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.554170][T26899] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.579891][T26899] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2940.598554][T26909] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x980e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x42000000) 04:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000e00000006040000000000000000", 0x39}], 0x1) 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf0ff1f00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf4000000) 04:41:38 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfe000000) 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x100000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2941.232203][T26940] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2941.249056][T26940] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x400000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001100000006040000000000000000", 0x39}], 0x1) 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1100000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2941.274747][ C0] sd 0:0:1:0: tag#6268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2941.284650][ C0] sd 0:0:1:0: tag#6268 CDB: opcode=0xe5 (vendor) [ 2941.290999][ C0] sd 0:0:1:0: tag#6268 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2941.300242][ C0] sd 0:0:1:0: tag#6268 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2941.309555][ C0] sd 0:0:1:0: tag#6268 CDB[20]: ba 04:41:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf4010000) 04:41:38 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x1f00000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2941.529081][ C1] sd 0:0:1:0: tag#6269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2941.538942][ C1] sd 0:0:1:0: tag#6269 CDB: opcode=0xe5 (vendor) [ 2941.545314][ C1] sd 0:0:1:0: tag#6269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2941.554551][ C1] sd 0:0:1:0: tag#6269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2941.563602][ C1] sd 0:0:1:0: tag#6269 CDB[20]: ba 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x4000000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001200000006040000000000000000", 0x39}], 0x1) 04:41:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf4020000) 04:41:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x42010000) 04:41:39 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfe010000) 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x4100000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf0ffffff00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2942.130908][ C1] sd 0:0:1:0: tag#6270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2942.140803][ C1] sd 0:0:1:0: tag#6270 CDB: opcode=0xe5 (vendor) [ 2942.147168][ C1] sd 0:0:1:0: tag#6270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2942.156230][ C1] sd 0:0:1:0: tag#6270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2942.165286][ C1] sd 0:0:1:0: tag#6270 CDB[20]: ba 04:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001600000006040000000000000000", 0x39}], 0x1) 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xf5ffffff00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5000000) 04:41:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001700000006040000000000000000", 0x39}], 0x1) 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xfbffffff00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:39 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xff8f000000000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:40 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xbc0e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:40 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xfe020000) 04:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001800000006040000000000000000", 0x39}], 0x1) 04:41:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x42020000) 04:41:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xffffff7f00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:40 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5010000) 04:41:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0xffffffff00000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2943.004881][ C1] sd 0:0:1:0: tag#6271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2943.014834][ C1] sd 0:0:1:0: tag#6271 CDB: opcode=0xe5 (vendor) [ 2943.021160][ C1] sd 0:0:1:0: tag#6271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2943.030214][ C1] sd 0:0:1:0: tag#6271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2943.039288][ C1] sd 0:0:1:0: tag#6271 CDB[20]: ba 04:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001900000006040000000000000000", 0x39}], 0x1) 04:41:40 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xff000000) 04:41:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001f00000006040000000000000000", 0x39}], 0x1) 04:41:40 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x4}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:41 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:41 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x43000000) 04:41:41 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5020000) 04:41:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x8}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200002000000006040000000000000000", 0x39}], 0x1) 04:41:41 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xff010000) 04:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200003f00000006040000000000000000", 0x39}], 0x1) 04:41:41 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf6000000) [ 2943.905621][ C0] sd 0:0:1:0: tag#6208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2943.915552][ C0] sd 0:0:1:0: tag#6208 CDB: opcode=0xe5 (vendor) [ 2943.921907][ C0] sd 0:0:1:0: tag#6208 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2943.930925][ C0] sd 0:0:1:0: tag#6208 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2943.939966][ C0] sd 0:0:1:0: tag#6208 CDB[20]: ba 04:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200004e00000006040000000000000000", 0x39}], 0x1) 04:41:41 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x11}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:41 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xff020000) 04:41:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005000000006040000000000000000", 0x39}], 0x1) 04:41:42 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e000000000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x30}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x43010000) 04:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005200000006040000000000000000", 0x39}], 0x1) 04:41:42 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000) 04:41:42 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf6010000) 04:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005400000006040000000000000000", 0x39}], 0x1) [ 2944.788573][ C0] sd 0:0:1:0: tag#6209 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2944.798431][ C0] sd 0:0:1:0: tag#6209 CDB: opcode=0xe5 (vendor) [ 2944.804841][ C0] sd 0:0:1:0: tag#6209 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2944.813887][ C0] sd 0:0:1:0: tag#6209 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2944.822927][ C0] sd 0:0:1:0: tag#6209 CDB[20]: ba 04:41:42 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000) 04:41:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x41}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005800000006040000000000000000", 0x39}], 0x1) 04:41:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1100}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x43020000) [ 2945.077116][ C0] sd 0:0:1:0: tag#6210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2945.087010][ C0] sd 0:0:1:0: tag#6210 CDB: opcode=0xe5 (vendor) [ 2945.093645][ C0] sd 0:0:1:0: tag#6210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2945.102691][ C0] sd 0:0:1:0: tag#6210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2945.111818][ C0] sd 0:0:1:0: tag#6210 CDB[20]: ba 04:41:43 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffed700000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1f00}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:43 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x40000000000000) 04:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005e00000006040000000000000000", 0x39}], 0x1) 04:41:43 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf6020000) 04:41:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x44000000) 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x3000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2945.634356][T27362] validate_nla: 58 callbacks suppressed [ 2945.634370][T27362] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.650124][T27362] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.677933][ C1] sd 0:0:1:0: tag#6211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2945.682198][T27362] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.687894][ C1] sd 0:0:1:0: tag#6211 CDB: opcode=0xe5 (vendor) [ 2945.702352][ C1] sd 0:0:1:0: tag#6211 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2945.711473][ C1] sd 0:0:1:0: tag#6211 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2945.720558][ C1] sd 0:0:1:0: tag#6211 CDB[20]: ba 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x4000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2945.751386][T27380] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200006000000006040000000000000000", 0x39}], 0x1) [ 2945.856268][T27390] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.866573][T27390] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.888942][T27390] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x4100}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:43 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf7000000) 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x8fff}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2945.925475][T27399] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2945.959612][ C1] sd 0:0:1:0: tag#6212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2945.969484][ C1] sd 0:0:1:0: tag#6212 CDB: opcode=0xe5 (vendor) [ 2945.975941][ C1] sd 0:0:1:0: tag#6212 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2945.984987][ C1] sd 0:0:1:0: tag#6212 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2945.994117][ C1] sd 0:0:1:0: tag#6212 CDB[20]: ba 04:41:43 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xff8f}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200006200000006040000000000000000", 0x39}], 0x1) 04:41:43 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x100000000000000) 04:41:43 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x44010000) 04:41:43 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf7010000) 04:41:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x20010}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2946.493891][T27444] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2946.524505][ C1] sd 0:0:1:0: tag#6213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2946.534563][ C1] sd 0:0:1:0: tag#6213 CDB: opcode=0xe5 (vendor) 04:41:44 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x20200}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2946.540886][ C1] sd 0:0:1:0: tag#6213 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2946.549959][ C1] sd 0:0:1:0: tag#6213 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2946.558996][ C1] sd 0:0:1:0: tag#6213 CDB[20]: ba [ 2946.581091][T27459] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:44 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x80000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fc00000006040000000000000000", 0x39}], 0x1) 04:41:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x44020000) 04:41:44 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x101000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2946.769184][ C1] sd 0:0:1:0: tag#6214 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2946.779165][ C1] sd 0:0:1:0: tag#6214 CDB: opcode=0xe5 (vendor) [ 2946.785527][ C1] sd 0:0:1:0: tag#6214 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2946.794672][ C1] sd 0:0:1:0: tag#6214 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2946.803816][ C1] sd 0:0:1:0: tag#6214 CDB[20]: ba 04:41:44 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:44 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x101000000000000) 04:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fd00000006040000000000000000", 0x39}], 0x1) 04:41:44 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x300000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf7020000) 04:41:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x45000000) 04:41:44 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xf0ff1f}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ff00000006040000000000000000", 0x39}], 0x1) [ 2947.495970][ C0] sd 0:0:1:0: tag#6215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2947.505856][ C0] sd 0:0:1:0: tag#6215 CDB: opcode=0xe5 (vendor) [ 2947.512226][ C0] sd 0:0:1:0: tag#6215 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2947.521444][ C0] sd 0:0:1:0: tag#6215 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2947.530507][ C0] sd 0:0:1:0: tag#6215 CDB[20]: ba 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000400ad000006040000000000000000", 0x39}], 0x1) 04:41:45 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf8000000) 04:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000010006040000000000000000", 0x39}], 0x1) 04:41:45 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x4000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000020006040000000000000000", 0x39}], 0x1) 04:41:45 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x102000000000000) 04:41:45 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x45010000) 04:41:45 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf8010000) 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x10000200}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x11000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2948.335745][ C1] sd 0:0:1:0: tag#6216 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2948.345615][ C1] sd 0:0:1:0: tag#6216 CDB: opcode=0xe5 (vendor) [ 2948.351970][ C1] sd 0:0:1:0: tag#6216 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2948.361002][ C1] sd 0:0:1:0: tag#6216 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2948.370051][ C1] sd 0:0:1:0: tag#6216 CDB[20]: ba 04:41:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000030006040000000000000000", 0x39}], 0x1) 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1f000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:45 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x45020000) 04:41:45 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x1ffff000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2948.581273][ C1] sd 0:0:1:0: tag#6217 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2948.591141][ C1] sd 0:0:1:0: tag#6217 CDB: opcode=0xe5 (vendor) [ 2948.597493][ C1] sd 0:0:1:0: tag#6217 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2948.606539][ C1] sd 0:0:1:0: tag#6217 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2948.615582][ C1] sd 0:0:1:0: tag#6217 CDB[20]: ba [ 2948.709837][ C0] sd 0:0:1:0: tag#6218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2948.719822][ C0] sd 0:0:1:0: tag#6218 CDB: opcode=0xe5 (vendor) [ 2948.726142][ C0] sd 0:0:1:0: tag#6218 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2948.735170][ C0] sd 0:0:1:0: tag#6218 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2948.744240][ C0] sd 0:0:1:0: tag#6218 CDB[20]: ba 04:41:46 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000040006040000000000000000", 0x39}], 0x1) 04:41:46 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x40000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:46 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x200000000000000) 04:41:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf8020000) 04:41:46 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x46000000) 04:41:46 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x41000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2949.282873][ C1] sd 0:0:1:0: tag#6246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2949.292744][ C1] sd 0:0:1:0: tag#6246 CDB: opcode=0xe5 (vendor) [ 2949.299075][ C1] sd 0:0:1:0: tag#6246 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2949.308555][ C1] sd 0:0:1:0: tag#6246 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2949.317626][ C1] sd 0:0:1:0: tag#6246 CDB[20]: ba 04:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ad00040006040000000000000000", 0x39}], 0x1) 04:41:46 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xf0ffffff}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:46 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf9000000) 04:41:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000050006040000000000000000", 0x39}], 0x1) 04:41:46 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xf5ffffff}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:47 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x46010000) 04:41:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xfbffffff}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000060006040000000000000000", 0x39}], 0x1) 04:41:47 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x201000000000000) 04:41:47 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf9010000) 04:41:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xff8f0000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000070006040000000000000000", 0x39}], 0x1) [ 2950.233034][ C1] sd 0:0:1:0: tag#6247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2950.242918][ C1] sd 0:0:1:0: tag#6247 CDB: opcode=0xe5 (vendor) [ 2950.249337][ C1] sd 0:0:1:0: tag#6247 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2950.258573][ C1] sd 0:0:1:0: tag#6247 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2950.267713][ C1] sd 0:0:1:0: tag#6247 CDB[20]: ba 04:41:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xffffff7f}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000080006040000000000000000", 0x39}], 0x1) 04:41:47 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xfffffff0}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:47 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x46020000) [ 2950.461713][ C0] sd 0:0:1:0: tag#6248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2950.471574][ C0] sd 0:0:1:0: tag#6248 CDB: opcode=0xe5 (vendor) [ 2950.477902][ C0] sd 0:0:1:0: tag#6248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2950.487045][ C0] sd 0:0:1:0: tag#6248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2950.496090][ C0] sd 0:0:1:0: tag#6248 CDB[20]: ba 04:41:48 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:48 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x202000000000000) 04:41:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xfffffff5}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000090006040000000000000000", 0x39}], 0x1) 04:41:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf9020000) 04:41:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x47000000) [ 2951.065935][ C0] sd 0:0:1:0: tag#6249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2951.075823][ C0] sd 0:0:1:0: tag#6249 CDB: opcode=0xe5 (vendor) [ 2951.082188][ C0] sd 0:0:1:0: tag#6249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2951.091233][ C0] sd 0:0:1:0: tag#6249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2951.100336][ C0] sd 0:0:1:0: tag#6249 CDB[20]: ba [ 2951.101922][T27837] validate_nla: 53 callbacks suppressed 04:41:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0xfffffffb}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2951.101935][T27837] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0x200003db, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:48 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x47010000) 04:41:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x22}, 0x4f) [ 2951.235856][T27852] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2951.258120][T27837] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x58) [ 2951.313356][T27852] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000a0006040000000000000000", 0x39}], 0x1) [ 2951.433195][T27893] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2951.442598][T27893] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2951.462118][T27893] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2951.471049][T27899] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:49 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x2000058f) 04:41:49 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x47020000) 04:41:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfa000000) 04:41:49 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x300000000000000) 04:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000b0006040000000000000000", 0x39}], 0x1) [ 2951.968338][T27914] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2951.972652][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 2951.972678][ C0] sd 0:0:1:0: tag#6251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2951.992853][ C0] sd 0:0:1:0: tag#6251 CDB: opcode=0xe5 (vendor) [ 2951.999198][ C0] sd 0:0:1:0: tag#6251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2952.008258][ C0] sd 0:0:1:0: tag#6251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 04:41:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x800) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0xfffffffe, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000080)="7a3328e9f8ad63e054e90dd2982450f6a457b75a41ee5b55296718560495bd00b3a57f0ea4fcfeb1922e439c10af971938", 0x31, 0x4, &(0x7f0000000100)={r1, r2+60000000}) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2952.017316][ C0] sd 0:0:1:0: tag#6251 CDB[20]: ba 04:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000c0006040000000000000000", 0x39}], 0x1) [ 2952.043711][T27924] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:49 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x4000, &(0x7f0000000040)=0x2, 0x7) socket$inet6(0xa, 0x4, 0x2) 04:41:49 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x301000000000000) 04:41:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000d0006040000000000000000", 0x39}], 0x1) 04:41:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfa010000) 04:41:50 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:50 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x48000000) 04:41:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x6, &(0x7f0000000040)="645641a83d1a9e081cf39f52ca2d6db471eb6726d527bfaf50e332af9c55e0138a2cb1609778238070764a1fd882d3cfb31856c6759e484fbdf1f1c72efd63c144a75dc261f536cf376ab8a6b5d8046aa8f03ca8b2b2e270754323d8a4767b26bcd8efb0c372cae8e59b1bd6644d039215bb50e261531d714ef5c318f72d44ee9ef43e8711276f5258ab818b12e7e5fea10b736ad5363a45568b7f128c61e22c4b4f13fb1a524d07de94a2") clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000000e0006040000000000000000", 0x39}], 0x1) 04:41:50 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x302000000000000) 04:41:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfa020000) 04:41:50 executing program 5: mq_unlink(&(0x7f00000002c0)=']/)[[;\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) r2 = getpid() clone3(&(0x7f00000005c0)={0x8010000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/136, 0x88, &(0x7f00000001c0)=""/98, &(0x7f0000000280)=[r1, r0, r2], 0x3}, 0x58) 04:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000100006040000000000000000", 0x39}], 0x1) 04:41:50 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f0000000140)="82d0084905232842e632fa45a3e267a2c45942e18f1e8297a6f5729427ad2305364cc3d6f4c9b5407c4b0dfa7e0bc904d0575fdaa75ac1894df26335e65cac892533859284342d299e6b7c636811bc29b0430b706eb5425a795d3a300d2bba81238eee3a96eedff47578c6fef628ec9e89fe2d5bca4728cf73d203dae506710f75855349a22a5b6759d3a7114f60081c9268d6a69512eeb7ccca8d1569ed56f59a01b02a2cb86442f9f400dce1d76e8b27d224c37333b1bcd93eac19502e286c5a514cd85814351f8bb9", 0xca}, {&(0x7f0000000240)="110d39667dd19e680c6ef9735736d51d430c1c3bc43d05b06ae0fe42d42e679430c776a6ea9cc311d726f98e443d1bdbd6beba0711be6f5777c302", 0x3b}, {&(0x7f0000000280)="689bc4095607ba641e47969506605c31084c707978c3aef2dfcbcb3ad1a00f50d5bb18c100a3cb2066b979c246d148dff07a2a6f1f4579947a", 0x39}, {&(0x7f00000005c0)="b5299fbd91a39acd98f14b09ac523485105c4e08d1437b9ce9da10da8393ee25b9a49836bc04dcded2d7ea038c83e6acd1e53da7c462b86c94fb4c5f2292997e92881988dcdf50ae614b1e37062c12a09f8a32781e8d751de00b432b49717df789d2a22fda18fc0211467c6203489d075a0512ec2e21cf", 0x77}, {&(0x7f0000000640)="aee34b32c58c5d3e655093fe4fcf33e0c42782129e6ac19f9d46e03b675d5d4d629724ec70ea029b8384683851bf6edcc0a8ab79bb785c8f41cb6bb1a21f049960935b0b9a38e85bdf58385eb59b3cdca5f711f910357f9d2d678776579d36f52bcfa0b1e76013ddc5639bca320777e2a18d125bcf59359d36b08bf5c6cf49d3dd9aae555cfa63a05056e073ccdd54a08e41e52df2ca899368892e8e34655069f9950ecf7b776b425693acb4ab1d60421df26aa21585ccae172d5d6a28e2151e9bc1f8553926291cf33725cf2bbc3deb5b26077d5423cb85ec4f6e388cd9d495d0b0bc3a593c3f0a0796e0304a9fcd2317b399feb3d770e60dd33d06d27d26a034b7f9f227917cd2cc11e3560e6dff61f70aae925b95ff304240359a6f5f45b8340dc9ad6d05c49547af95414483efc524082c36da27b6cd2998ee568f46596f8debd464defd7251901eac42202e47d6bd24068fbd57122707f9a9678722f68e287d4f252e2fc0391b87a299839103b3c7ca38ac20e0d46b149a81ded74f423b1fa73d7c3ccd9c0acb9e44bcbc3d753370a1ac857b5588a7de6b32b73286e4665ffe995cf1f52776ccd125f3988a6d0bcd18dda56481d8c8745ee01d2e24e10e35fdbd35dce726dcffece8762b2886e03f017a72187ff871fce3b2503e4b02b680d59eb7f50a4c6b437df2090624ca209e7d03f0bf6a988d13d8da5bcc337adefe9a4687246d7c091dcad81ae5a55411a3c13bdf9ff877b97991739bc3a2694cc01a9d4811ed1d19b81e208549d1aa64f03a3adc4e0c90f70d653c0b5e248f32f06d79aa2d63fa59fc04b1ea59a18cd6d29133726b3803843dbe407cb882f8f5ba0957cc1b1a9578779bf7f937ba02bab5ab90ee90f0cf5e7ffbc20af6e0df654becb6a897227c57ef7dd3d29e452b02e3cb20f9f5985dddd63650e7dcc0d7d6c6ccac46be64b1680016cae8526e628a5d70f7a992719254dd54477d90ce8098da6ecac405785f9d2b0f291224a506839c47588d8f12845d8c8be1af4575fb647bed57d76d7c2048c7dd567f2d92eb90f8650391827f9db5f4710c266e568dc4b5ac4d7e682bacef21bf8d85792c7697d1693c5c0df11b94367a3400fdfac3efd29c177406c8156af19f609f57018ec472c898f16bdc7309682757ac5f1d667b15ad7593188d17978ded9586aa2c48a6e68a6b2d819e4a082d390a84687f41c18ecb835a04e80bcf9521154ee9b8e3ef00699cb2611b4ad7b8ad3667587d7337c87f58fef35585160d153c078de5a5036e782290d04eefa5f0ded36319f8b5b8eeb830fff667eaedfc82797015239795fbcd5b6a9ed18bb962a97e510a49fc8b08ad9526d953aaaedc80edcb0e94824863131beaa5d9e47438aded016166e1262adac4945a2b1d50fbd1489eedbba86b052872d32cf524feb4fa94890512f84a8f92c2f586aaf56a861964a4b1db625bdc9251b2ff40f3214d01ddbcaa5b3bab948e9f194434cd1b801ff1602883db02f14c0e2ff4fe39124ea3ef9fea5ab80e99117f8dfcb747b6875b305dd12a3d04f9189e34fdb11a2b70674961ba240b47412c11909afea867d20553f029bd90e582caaa23537ca1856109bcd8f15204a4099db1ada07e3503f6d9337f3803e16471025ca60a834c927c49209b2b1d189670e72250f4caa7eca9a1c92c04a6ce8749212b9b37faec28ac3cfe32f20e19529f539a77843349035459a2b50c0c03b236989b2616a9b22aa99e8ae3abeefacd3419bbb30c2131d3f10b808b468d69c5f24bd3ba2db809f3874cb8245fc4926f38b26f3137dd5e24157ee2e7f7689c56ba863c556618ffd3bece97f57232743dc9a757572b5fdd1f3077130161b0ded7f3ed1b2e2cc89159a662cf37d524e757ef48237cab144601efa5231d32d6ebb1739da2020d996c3c2793829fb45eeef3b147960660aaa03bebfdedc38e30bcdcb17e891f81b692dee2070550ebecac6381993eb0ec68e69324c1a814d97f17776ca18f1c8913889e2b4d85929d9f7ff611e7967434221bd98012d0cac774c3fe20dc15a4ef3ed3d425b42531ac46675d53cd7b2f8343ca8249c18be8ead6fd19bb3b06fb93cf0b02b08ac1fb328043cc328e968f7b9bbfbf3fe6a518c951f1684657aa8b01fcc721b1c56f9984fc45577e224aca2217a5067601bcce48f65a8d3d931c0d02c396c1ce93d0ec30f4f3a40450ac16a810c6db54ab99a689f47bd750e591fc300fd316cd1e78756743d708b2b782765a4a198d2aef01bcf27e90ed7f621b5072d013fbfc832e282f2b217a43359229ac0303f3568c38347b17bacb8603fa964653cbee3dc8b9971ec9db516a5097cd534ed113fed3682ed4c6ef9eb090c933af267a35371460936f928eb089ec2f8bd4d1c90ff95bab57bddba3780eaf1b94264e4e8b40c9738befd2bc052b326cafa397a6a5da79a44eee3d2bea28fef1cfac25c82b8c069a7c3bee7b07b66ce8a67ac8d301dbe40afafe14e5b5cf8e35a113c72e3c095f82d135e1e7615068a89f56a9e870c27af2734053848f78a9bd81c40f4052437533afdc6148f9e1d70ba1414cc6eb1a7149ddf934a6293c9f76c3bf5b3b707ade8f459483c2b0f10b989e1d62e3c5224daabf02d008c9538672af2f643da1d9e313608185edc89fef93532ed0f4287ade6a2591cc81dc00808af842abd6c2c1ed81ab67ef548472dd5a25f52473fb6550c91b48fca1ce3e867fc496e4a87876cd0a3e52bc1edfe7d40c7548f6276ada5a3292695a43014e2bef3d25400df1a37cfb5fb6acce55c0a5b67c3ec68a39882e8c02bbabae6d83b551ee65357688addfca8f3b9ba1ad8467afdd3892b8edec341b74fc5266e7a9468972ba0266fe4e6177a7997d0af69c650369c42ea0ae4eda2a4946f9e0083e650d98dd297e0e25e8ac9eb9a8b0d75df4d941c48f918913ce5d1d86da7b0434e7d39e704c4e7776dc6c7b5e3d00d9b8d32ff25e7f1a7a5720f6589785eb08079c97999ae583958a91e72ebb482786eb9d5094c7d56ab4a295b15c56db132a5bbcfc9616c591c2bc4acb9b1a8570852cad96330908872a6e5b930aa0e2c7a46904d98b35c93b401addc6315f1f055386c0fdda0eaf72d267778afdbce2aa9e4102247e455bf124ed088362bd8ad48637e0549c402934647ddcb1767770785458ba3bfdd009b4c70242c5abcb97fd19be1b82a53d3749755b160d9e562a3a513e4d9a5e03b3c8f0014dc88a068a03efd4d9d15d438411605af9b834823df619a6b8f929b812b9e178c265191c03fe0c3aab14b02f83cf5887ca369adce592d8d54ec385668dba1e90ad4a990c01e131711d8e4d66444d2a5b80d76b9043f3d067ee7543b98cbb23d9d9f22c3a7fe73b71b03bed438255460f7c0527813fd7a030a91f15a30727ad29d5458ebd9fd5f402665e3de2ddb0ac340528c5cfc1afad25a370568e44790109fda0278e6392b9b002a2f7ed188e5d8ec49dc80267e859d9f8702d3e4c514bb67bd70b82a9aa498dd555534f39836b03582e142e3f67d507c2d8964817ebf551fe871865cbf4eb31b3df302243051a18cc5e0da86c653ba03edf188ae5afbf426654605b750921254bc3e2542b1da24a34e031e4498b511bc316f69e5175b5dc55596fe05193b6be5d3538ef434c420f05c420c4ca7182c18c997ae6a60b7d38525971367d931740842cfb181f7aa753ab2146eb72e98a77fa8f494fcc429c8bd22771e89a3990356a5839715a3b09fd032338251b8725a07e481917c1917b2ebc1bbfcf3217359409eae4a435913a7b87f2cb6838a30adbd505cf8a30542689a0818602cf9a68815595cfd5a9bed121005637ad796b9a55479c3cdc71ad18ee75f258102aeed4f62a8c3802a901f3e168d72de795d406068a6b6c18e1fc3fb6cef3489a9fc593839df6e19fcf425950e50928fb2d6f5eef0b3e15f95d8420f8defdbd2cadbfecfc9e18eec8fcb81736cd64114205134b234aca083d45500baace969ebcb9d0c331705f571fd2b5f2918dcbd0df59a6eb70f95a0542a40a4e85d5b08fb7c2e42f9d4331d7b22f1b679346f1b09c70ced165dae330aee0107cf41b3627d0ee62bd634957d3cd612c9d964406aaafdfb4e0492f93114c2b3cb3cb631d3f3c2427c1d0b52f789ce61918456556f7a4620bec83588e51715e5321e8c620ffcc496a14286a226b13d85bafa6600c11c9f59f0156f6984f5b90cd98ab132c91b694b5dd4b9135dfbf32b7bd94f49d7497e8ca1f7d163f303f29562ac826f695cdbd8ad66d64c84d49c88e3145de93c209494cea37f3f4852619d04b57f00c978b8de61f6191022c2d87bb12e495a7ff25150699e46dcb573b19476f930ed8e7bbec4fa120799d1942c1b15363d9e2c5dd238ed7850a07a86e0bc707f119a5319cd444d89e502a7c4847bf231ae4e258fc1dfd856e7d5cbcbc62ef5ecee8a64c25a691f41c28bd385bcc825bb0d54d1b715c407d817a3ff524431609f2f0b3e7fc4295723d7e688354986e4cb88f83e20aada7e94e6a30151ea863516b9ed78d75377a4b71af53a671eb06a6cd0a0d0b71b6d4e20fb7b371385574e681ced1f4ac0386d56caf2f09aa9699cb9cce4c52ac3dba565b93aa4ca051ade679b0b36ca6ae1d5e2868fae465d163d2b2bbf25fce70c865ab7233527e9def17d2c6659692a4b1ce3fcdc2c92ee5ebf24bae28b911f7283b67fdcedf9ddba0aa88d7edb82a14e9fdc371a5cd003d0d29d76a3cc07d90f2562c8ce6b5fb3f01672257227d64a2b712757ceca777b06518ecfb42a05e0b3333e3dd6524dacd67b70118a10f06bc09fa23866c25b87579252b32fae85139f1b53ee730fb7eabd72d2947730ad4411f72ede1d15fc7da36a896bec19340a22d066c9883aa285fe6f421691f3ba4efdd442c7f41e2443910f7975c4f73fd4409df2554df02878168fac20332ddfad473382b668a80d365f30b2b887980d360e4cf05ffc07b35e64a652eb90d8877d4ff8b0b8a0c4733ba69f24bd0a757cfb19ba1b6b7ba6b43b9f24c98d2babfa93985f0cfcdde472ada4d9678ded72e8c32a508c4d71d1e59fc7d9606783fdf4ec6d473cc9ddd8e115499349e254b85a0f433671303a1e5f65667d650ce00097e076660baf4da2f7e8a704645b51a2bc6b18def05690112c048fcbc09f992ce2e452b94c5e60993ac95df4c4ca818c6240c55ee68efdea83f00e40c34041ab5d5a1db122fdc0073bd2fff3b070c0d502d6318a57cf489406b8fe227c23cf05d67847acc569714cbf2e78200d804c21b59a2744bc2893bfe443397dfe03ea875198f382607e38c3bce09dc18cf0f1fa33a3b51f5b26b5cafc3e96ee6fcdf7075c369d3214d6d831413a43202f4b29b18351ebd4df53ba02af0960bd591225d1d8f49fc0d510a5e2b57495fc056a5de2c757d1b94a7833f169d9fc1ce644ad38332120811b7f4e1c7b5f3c71a6452caeb1c081c300777e97edfbe3a12e45192f234be535bcf0ee806b65a291a91422dce7a466c12d2ee4659cd6da2420cab4cadd0777fccbcc83330f8ac3a486a31b2a3c55680939293c5a66f4c4068243a6042da0e0a195f0dbcdee54c2abc7770c49745c8f7079f1591fcb2be962192298971f3e5758e21699c00f0d0a7ce2204dd4f699ab85da9bcbbef99599e84187913c8d7629c98d22eaef474bd59c312da26faae0b45770d38de0ae7a63706604219f3e55aad3fd684cb248af99205a4bd72b117f06f3fb9d018ac74fa98546c14ed3f071263ea", 0x1000}, {&(0x7f00000002c0)="e464008ea331e1965b6198282261310de5adbf4422c38983d900e9b647fb", 0x1e}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000500)="b1f7a3513915a2f8c4417dcec6da78d5a94f0e65a5522c6490ad", 0x1a}], 0x8, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) wait4(r0, &(0x7f0000000040), 0x0, &(0x7f0000000080)) [ 2952.861383][ C0] sd 0:0:1:0: tag#6252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2952.871242][ C0] sd 0:0:1:0: tag#6252 CDB: opcode=0xe5 (vendor) [ 2952.877657][ C0] sd 0:0:1:0: tag#6252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2952.886702][ C0] sd 0:0:1:0: tag#6252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2952.895745][ C0] sd 0:0:1:0: tag#6252 CDB[20]: ba 04:41:50 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000000000000) 04:41:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000110006040000000000000000", 0x39}], 0x1) 04:41:50 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfb000000) [ 2953.014873][ C1] sd 0:0:1:0: tag#6253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2953.024831][ C1] sd 0:0:1:0: tag#6253 CDB: opcode=0xe5 (vendor) [ 2953.031242][ C1] sd 0:0:1:0: tag#6253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2953.040261][ C1] sd 0:0:1:0: tag#6253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2953.049406][ C1] sd 0:0:1:0: tag#6253 CDB[20]: ba 04:41:51 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x181, 0x16) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x12}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x400000000000012a}, 0x58) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x7, 0x100000) 04:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000120006040000000000000000", 0x39}], 0x1) 04:41:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x48010000) 04:41:51 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x401000000000000) 04:41:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfb010000) 04:41:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x1, 0x20) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000160006040000000000000000", 0x39}], 0x1) [ 2953.731942][ C0] sd 0:0:1:0: tag#6254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2953.741821][ C0] sd 0:0:1:0: tag#6254 CDB: opcode=0xe5 (vendor) [ 2953.748498][ C0] sd 0:0:1:0: tag#6254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2953.757541][ C0] sd 0:0:1:0: tag#6254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2953.766596][ C0] sd 0:0:1:0: tag#6254 CDB[20]: ba 04:41:51 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x402000000000000) 04:41:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = getpid() clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x17}, &(0x7f0000000300)=""/210, 0xd2, &(0x7f0000000400)=""/211, &(0x7f0000000080)=[r0, r0, r2, r1, r0, r1, r2, r2, r3], 0x9}, 0x58) 04:41:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x42000000, &(0x7f0000000100)="cd026b4f8aa277c68969bef1d5133a80f7c3d704dd52f9b52a4857fa13b01d5c6335211d8378233db4cc6f0fdb1165c5f67f15b3413cfb67f6ce8817816e1bff2a9ed54c4181ebb357862d701db36c4caa26a2d11579cdc628fdc0c00f2ec7598c0e7778e2ae4f12c46b5c1d5802a4fd5a38d15af2c3603c7a4bfe301acc73a931e574411712f60dab8462a15c5fa644845336fd498ff4fffeff574f37c1718140eb8da95dc5a8438c49b5a76eda9e62e9f69e158bb3d7bcef1ce205f589d6d1958f1084f14e4385c03631cd44328796f435689c9a1feaef7a50", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="abd5e89668027bef33953af0b20f8f998c2166c48eaa35c0c4be5184d6ea134107d46c08dcf6c99f0b76a4e1745914946e9036f879a079f5f3dc2f30e5b8") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x8000, &(0x7f0000000040)=0x84, 0x31) clone3(&(0x7f0000000080)={0x181400000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/206, 0xce, &(0x7f0000000400)=""/201, &(0x7f0000000080)}, 0x58) gettid() 04:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000170006040000000000000000", 0x39}], 0x1) 04:41:51 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:51 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x48020000) 04:41:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000180006040000000000000000", 0x39}], 0x1) 04:41:51 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0xc000, &(0x7f0000000040)=0x1000, 0x7) 04:41:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfb020000) 04:41:51 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x500000000000000) 04:41:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x40000146}, 0x4f) 04:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000190006040000000000000000", 0x39}], 0x1) 04:41:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80090100, &(0x7f0000001680)="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", &(0x7f0000000000), &(0x7f0000000500), &(0x7f0000002680)="4dc6d324548f1e0293a6") r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x1, 0x2) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000026c0)=0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3a) clone3(&(0x7f0000000540)={0x4018080, 0x0, 0x0, 0x0, {}, &(0x7f0000002740)=""/234, 0xea, &(0x7f0000000400)=""/211, &(0x7f0000002700)=[r0, r1, 0x0, r2, r2, r2, r3], 0x7}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="721714c06023deadef98cf44fab231e37076f6ae87", 0x15}, {&(0x7f0000000080)="26ba595b5fd6a09e5f49f19d3e0d2dcbd51139311e4ab8552bb0dffec826557ed3a0b05e1de889ba82bd8c94cbf6908acf1ee7d21b23911c713aad1167d9976ef8ade3984bef392a85120ce7430cf9a9740f6b3e8f12231fe901bde99294f2dcb5", 0x61}, {&(0x7f0000000100)="5869045f1671b9451820493529a7a9afdd8c530a69fea84199da9c2fcd29abbfdc690c50bf84a5964a2e3eefb92b350e0f32cdbb1ab27b0913229af388", 0x3d}, {&(0x7f0000000140)="a62cccdde959e7", 0x7}, {&(0x7f0000000180)="b70ef4a9a9aed6b96aefbe2db33511abd6660a5e14fd060f78ecd362f28bf8d2d882c6430fd641440e44a842c6457daff72a7ac946c0b7d0fc21ff6452bbfbb6904b1a124b975b9950500c35ee199db21d93d838efc957aad08e47a5971332ff13ad15f32a6937703b6594de5ea4de7a0895c2a49a51b28d65b77fc9852c40491209d65acd207bd055d665a9605ea945c356b2cddea8e24aeaeba980b225f31528a933630900f14e943684bee367d9076d3624c00e9c585c86cc51cf76ff00a48a00883988679ab80f48e369a7b78fa715483329fff8e79efed54b558c519e5f82e0bb17df522eb6076e3ab623bb22fe05fbded50d3b049909", 0xf9}, {&(0x7f00000005c0)="c2fffb626520b3bfb8e04bd8b462d21ec284f9ffe4a6894496f11eb7f816c4a6c41c378d9b0afb454ec70d96a9050d392780362d929d4117c8e5c154851519154aa23b474e02a01fabba19cb656bb1365dcb5c75ab842849423050008afd231bb195eae313485a5fcbfc130d8c88701d4b7802dfc2ebbc0f46a03f6ab0c40066bef61c1bc20f7683df897af8bfc79eec3b9a45c6daba967ce053374ce6c7ed7a69c08188f2b3ef8111d9", 0xaa}, {&(0x7f0000000680)="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", 0x1000}], 0x7, 0x8) [ 2954.610447][ C1] sd 0:0:1:0: tag#6270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2954.620357][ C1] sd 0:0:1:0: tag#6270 CDB: opcode=0xe5 (vendor) [ 2954.626725][ C1] sd 0:0:1:0: tag#6270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2954.636018][ C1] sd 0:0:1:0: tag#6270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2954.645071][ C1] sd 0:0:1:0: tag#6270 CDB[20]: ba 04:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000001f0006040000000000000000", 0x39}], 0x1) 04:41:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfc000000) 04:41:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x4c2) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x2, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) 04:41:52 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000200006040000000000000000", 0x39}], 0x1) 04:41:52 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r0 = socket$inet6(0xa, 0x3, 0x106) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000023c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7fff, @mcast1, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="76b88b2bf9e5763207ecd2aef8", 0xd}], 0x1, &(0x7f0000000200)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x100}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)="433c78133a6c4af045da6b8ca99490c531d3bf916d67c32c02", 0x19}, {&(0x7f0000000280)="2814668e6f6c337386f343932302bc44da006a7aaff6717e38c5e5f9372058b2739e67c6", 0x24}, {&(0x7f00000005c0)="71d81575e5af11ad762c9ba3b1985c4b8d2db1667ffbea8e62557a462ba27c88db666e7cdacdd45fa5965ac452112ac649ad3ee448d47f9d398e182ca1a2827f8aea74ea743639125927d82c02e0f0ef1f140eeb294a94a4c0c35e5e3e5f1ca35a83f873bb1eaa390b02d0e0401372c68e57cfc03289834d27fc39cab9ebb5e0ffe3bc1490990ea0ce7ed022", 0x8c}, {&(0x7f0000000680)="23126b99fcc1efa63037c5046c9c08ec43920d96f463b4fb233a8516726a906e16a020549b9162e39f7816c658ffef62ba7c9cb9a5a6f6c665083cf08249a68d18e1469415416d3fc3fc398221466f6fa87df3abcad9287d6eb01cb43d84c83ef11db36bb9b699a2d120c432", 0x6c}, {&(0x7f0000000700)="340de8bb2dd061ee69b052495a93a45c9baa6b0b044e71e1e8db0a04187bba1834e7acc47c4ddf587cc752a0f33a5421a0acbd4bc07d7be9bfe4e822d80dda6f6116d2f564d040993aea266b2746979993eb6a66fe67289d5c7a2d0c94b5d76d5fd591ea8c3cd3c0c8ad19a2ae4e12ff3cb4b5af8efc133999ec9a929bd1d476f34b0e0aab094d49543cb29af09c27921a6afcc202181e9e1cee", 0x9a}, {&(0x7f00000007c0)="6aedf0f8f047737044c961ce52d0ff1f21f4f63c9a53b089ab662d7a9bd86b5c09eddbfac2ef0d99ed7f880cd751ff4bed0f4a3d02cc38c1e896b8c498b4ef55560d01bf", 0x44}, {&(0x7f0000000840)="fe79899d35b6f2fcb40e1877ef0268441b9cda9aa8f4dbbd926cc9afc1236850ba578c65917cb271eb3554b1fc4cba6e54732a0f8a29af7b3473d7e0d4afe5d756f4944c4d74849e95ddad8dd7c6541487a94f567ca1f0670682aac1551332b18f54a17da503bfe98d52bcd0e1e04e98da5d0760f1ec5ec5d2ed9eab2504c37fdce4173a4ad2a7c9b0464d33b8ed0342510c38be4e2a0294e8daf08f88171a232b68c9e7983e83f457ede2fe3d3cf94ceff3decde78dcbcac7913faa11a55570ad764f58b175163dd4474adedf1704555e998f5d068f162f5d5e81119a971e4c2444ca1066859ea84b9c1c5f", 0xec}], 0x7, &(0x7f00000009c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x89, 0x4, 0x1, 0x8, 0x0, [@private2, @mcast1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}], 0x68}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0xa69a, @mcast1, 0x101}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000a40)="70040a9279c9eb25b66c79e97414fb69f1749365a0fd7d1a65f9b6f579ed9762d30f49ad06c0dc4c1c3555b9ffde61d1ccc52cbda4a48b4ae8b273c79d6a45ed444ec5c7f1189eedf0deca9b7c693c4c70114435b858764a3a56900fc7ce4ec5ff1554d7bf456a5f821b64b17f8f3165b486a0cbf6cf3dfc913c4563dba1a75288cc81615c01315d44140f315e1d2f8d18b80ef8f2105e2ad2957b0c53d8d614abd3df81abf3abb4aab371029192325a570b1f31c57d705ebd", 0xb9}, {&(0x7f0000000b00)="ac49377d63fd0018397a1f120fabb094c5c91b15cb4088cec527f197f32f27fee8a16cf09e93be3b5befffef836a6c461d46b22137829e6c9c175d48539f0f3398aa9faccb71", 0x46}, {&(0x7f0000000b80)="fb1cd8f8fab66fdcaa6cd4c647550ade67d83562b938b2aa5caab32e8a2982bbf70a7edaa762a2f3f37734988901466215d8533c1f9e9ad49cb9fc79c1a0ea50116d3a0c0c1ac381f5f7aa7fc00136b2276c4fea3d9939f0ef944bd69ac1bf692c30571fe93c6866bc629b127399f26d9df2f737486f793829df88e2557607d27979fe51a56ef6f22f4224f78c8b6aefaebe023f2463a80cbb24907e0416d3cbe0af0a50d759fae837ef105e7e7aa932f241df6c97b7b4549ecaf0a8820eb4199f6e00e6d4e0727215121f16a281f56f275d1d504c", 0xd5}, {&(0x7f0000000c80)="b9a7e8fc590b539657679ba8988497ac5ff1c4a113a9fb0fa33addcf9b6fc2a5b7d60f27c699cdc9fa996ee2eabd5b58dd74b01351103f9972187c7a8115753da8216faafa1ce0d4e3409d5f9e9fc100fbde4f0cc2a1ae95ba8284a3ac54658bb35ca7020506f8afb42cde0fbf2e9dd353ed8fba5c3a92194d0fa5006e4fd7b0cdaf67", 0x83}, {&(0x7f0000000d40)="7aff9d4d23bb64260d4deb5986c069ff61bce7479551d5dfb555fd1f36aa5b21a0b249e90f2d8c026f579afaac4d0e131bac5dc462b1c46c0c61381c8773bc537d838d9cafe009c0df11480795a1c33acf2c42", 0x53}, {&(0x7f0000000dc0)="e1e720c837fdee25b3553aee9c51c3fad148374385047e77494e0583579cff3c2b38bb1319679beb9804ddf6a185a131607e031ab346bfa00b52fe64f4823a3123a4d87082749c97819555efba58e591409d0154d7112e1a47f75e4b3a59563431", 0x61}, {&(0x7f0000000e40)="905ad8ae13694ab9b88528282a16da3e58bdedaf33c9e208c57a33cd879d88636ceb7ce3cafdfd9e94aa06ef10f272ac3ed4932aa071a20f0cfc807d1ef2c7477300b80150ab108e362607a0b6dd2c811ca275af059431e2d7d3afdcf416d06af89f8710eaecbb58c766213db478d2a9cc32b7c0aca284b58b9d262ecb26d70c1196746deef8632d1a97d16ecb88ed0259e39c4775f306a5f0dc86ec7a42b0cea594de2f", 0xa4}, {&(0x7f0000000f00)="fc5c9949d39d4a4ddd2bd20f62bfa6c3d7e194880b694a8160230de6d4ed51207efd55eda4ab222aea563e5e277702f38cb5a3c4c694088abf3e43c5c4b7de1ddf13ffd2118a1e8d105f92d21b122ac7473099c57d48f4f19f1fc8bab028fb11feb93b3f2b14a4a37fb7af717a2f09d97116d5d574ce279993e541ba47bb865f396f6122cc511e49e854318d908dc60da0d97179a25ed2972a824dfb5ac36e3b9ca87bde", 0xa4}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000000500)="131432bf7a9b22bae81fbd9e53e479264bdb1af11f2e05a927160a9348836f77ed1686a165e133117bc1", 0x2a}], 0xa, &(0x7f0000002080)=[@dstopts_2292={{0x188, 0x29, 0x4, {0x3c, 0x2d, '\x00', [@calipso={0x7, 0x58, {0x1, 0x14, 0x2, 0xfffc, [0x101, 0x74, 0x80000000, 0x68b2618f, 0x951, 0x40, 0xfff, 0x0, 0x7fff, 0x9]}}, @enc_lim={0x4, 0x1, 0x43}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @pad1, @generic={0x0, 0xeb, "9360264df018f9573461bec8de1c86416c365e042ad7d130e15198bc175eec321eea264e38b4c3fbf06c82557b79ed5e860f35d357dc68ef47935c0dbddfdfb77448cbcf32188ae3b88c73b1e1fb4c3b43c52a2071b6ae0145178ca6a58fa968c7701068eeb6782abd8281847cda8e1781620be2b0d39d2d9379eb057ce3f2bce172ee7d629db91652163c4cdd16a3b39b85cc53dc16175ead36deb34d8a47a14021fbcc5eef6d5ed9738782e455b2ad97606268d5b87cb3f7da558888b64d53846f394ca349d22ac5bfb5d52aa2b32618c5e32f424a707acb3227d99f26167f2761c9b2c10c5891f34afd"}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts={{0x170, 0x29, 0x37, {0x84, 0x2a, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0xa3f9, [0x10001]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x0, 0x2800, [0x7fffffff, 0x4, 0x9, 0x3f, 0x3f, 0x7233, 0x80000000, 0x2, 0xc0000, 0x5]}}, @ra={0x5, 0x2, 0x9}, @generic={0x1, 0xe5, "ebb3104767de81a260beb79ec47544ab35669463637d5ecc2fc8b07f8aa72e8559dffca796ff051346a2d697ddacd4976e4d00eb18716a47474431052f0b788c72b2142d809aa221e8d645ce4f0825de0bee874802516f0d6c8ff6eaf62e4c50109bd0c749d0b8cf3fdbeec28acde0f2b949ad7b04074a90a2238c7cca886d17d2f19fda0353f19c3315b8639504bfb77f490d2346e7dee5bc3173a4bd1538ae00fe3aeec27a90f43c5f85862c8bcc5c5eac9ebcf8a0977896a6692261877461b28573ceb6dfc67970510c64fdc83419f82b49993ae638822334a859c194cec8b40c823837"}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2b, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x320}}], 0x3, 0x28000) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{}, 0x4, &(0x7f0000000040)=[0x7ff, 0xef, 0x4, 0x7], 0x5, 0x1, [0xfffffffffffff47b, 0x7, 0x3, 0x7fff]}) setsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000100)=0x8, 0x4) 04:41:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfc010000) 04:41:52 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x501000000000000) 04:41:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x49000000) 04:41:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000003f0006040000000000000000", 0x39}], 0x1) 04:41:52 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) clone3(&(0x7f0000000540)={0x201001880, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/200, &(0x7f0000000040)=[r0], 0x1}, 0x58) [ 2955.476039][ C0] sd 0:0:1:0: tag#6271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2955.486017][ C0] sd 0:0:1:0: tag#6271 CDB: opcode=0xe5 (vendor) [ 2955.492394][ C0] sd 0:0:1:0: tag#6271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2955.501434][ C0] sd 0:0:1:0: tag#6271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2955.510552][ C0] sd 0:0:1:0: tag#6271 CDB[20]: ba 04:41:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0x1) 04:41:53 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x502000000000000) 04:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000004e0006040000000000000000", 0x39}], 0x1) 04:41:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0x843a, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x0, &(0x7f0000000040)=0x200000000, 0x20) 04:41:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x49010000) 04:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000500006040000000000000000", 0x39}], 0x1) 04:41:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfc020000) 04:41:53 executing program 5: sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x81) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000540)={0x40802080, 0x0, 0x0, 0x0, {0x30}, &(0x7f0000000040)=""/228, 0xe4, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x0, {r0}}, 0x58) 04:41:53 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x600000000000000) 04:41:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000000)=0x10000000000054bd, 0x8001) gettid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x6, 0x80000001) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x8000, &(0x7f0000000040)=0x8dde, 0x100000000) [ 2956.321112][T28319] validate_nla: 58 callbacks suppressed [ 2956.321127][T28319] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.354326][ C0] sd 0:0:1:0: tag#6208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2956.364187][ C0] sd 0:0:1:0: tag#6208 CDB: opcode=0xe5 (vendor) 04:41:53 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone(0x4000080, &(0x7f0000000040)="cceb92646c5c47bdb031790905934ecc1af355622c74d77930ee7f209cfbe34c5ce1da846594d091113f4f8d0c62bedece01678504c71ff8dcc148cc9f154851b1fb567be7663e67129e6bf37a7930466595839fd4e8f33a4c3c4929a932234bcbea790e120e62ae19264d3dec3252d63f1183248875287b72cea25c9fd181de2fe159d4ac4c659f8a3551979a21327dd14a22240980feb7246e564c75b414e30791f557ffa6a76c11b315ddfbc7dcf8492b0541222e343e10d4e7051181aff0de8e0a5e6317e520ec1758e1575da4a4fe89acf4037a873aba963e7cbc94cd", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="801276de83c0b8209d58599df55f020e0a686c4dfe8b5def71f9f8bdc1147cffd5f1bf2c0231dafa7cc9a13f24559ea5440137295dce24cf6300f84fc8d5a82305c7fd9b31906a87b0d169df6534f459") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002140)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002180)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000021c0)=0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000002200)=[r0, r0, r1, r0, r0, r1, r0, r0, r2], 0x9}, 0x58) [ 2956.370517][ C0] sd 0:0:1:0: tag#6208 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2956.379558][ C0] sd 0:0:1:0: tag#6208 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2956.388616][ C0] sd 0:0:1:0: tag#6208 CDB[20]: ba 04:41:53 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) [ 2956.426922][T28334] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.445547][T28334] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.453901][T28319] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:53 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x49020000) 04:41:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000520006040000000000000000", 0x39}], 0x1) 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x80, 0xfffffffffffffffe) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000040)=""/233, 0xe9, &(0x7f0000000400)=""/211}, 0x58) [ 2956.601774][T28363] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.623503][T28363] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.634132][ C1] sd 0:0:1:0: tag#6209 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2956.634139][T28363] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:54 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x601000000000000) 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x2) ptrace$setregs(0xd, 0x0, 0x9, &(0x7f00000005c0)="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") set_mempolicy(0x4000, &(0x7f0000000040)=0x9, 0x7fffffff) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2956.652045][ C1] sd 0:0:1:0: tag#6209 CDB: opcode=0xe5 (vendor) [ 2956.658387][ C1] sd 0:0:1:0: tag#6209 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2956.667429][ C1] sd 0:0:1:0: tag#6209 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2956.676463][ C1] sd 0:0:1:0: tag#6209 CDB[20]: ba [ 2956.681826][T28369] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4a000000) 04:41:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfd000000) 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0xfffffffe, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000540006040000000000000000", 0x39}], 0x1) [ 2956.787571][T28409] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2956.805916][ C1] sd 0:0:1:0: tag#6210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2956.815787][ C1] sd 0:0:1:0: tag#6210 CDB: opcode=0xe5 (vendor) [ 2956.822146][ C1] sd 0:0:1:0: tag#6210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20200, &(0x7f0000000040)="2aadda2619c2d3078c876c9810ddf1031f7648e9a7c93a5d813887c31e5ce129b5490f8e62e3f00425d41d3c1f3a1d32857971bf0e2d21682c1d178b624c1a822c3b76196850394741b53ade2e6eab80f9e52f94c2767fc63b65d9b3f008712bc6e2cb95b932e418adcf5117aa6f8dc4886e0512b04bb9f3364c5fbaf06382b14195e696a818e64006b8d8ca0fb6155e0a9e1e463346f91cc677c020ac", &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000005c0)="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") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x91045980, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) [ 2956.831205][ C1] sd 0:0:1:0: tag#6210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2956.840262][ C1] sd 0:0:1:0: tag#6210 CDB[20]: ba 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r2, 0x10004, 0x3) [ 2956.885482][T28416] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/205}, 0x58) set_mempolicy(0x4000, &(0x7f0000000040)=0x4, 0x4) set_mempolicy(0x2, &(0x7f0000000080)=0x7, 0x2) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x101820, 0x80, 0x1}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r0}}, 0x7fff) 04:41:54 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000580006040000000000000000", 0x39}], 0x1) 04:41:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfd010000) 04:41:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4a010000) 04:41:54 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x602000000000000) 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) [ 2957.400115][ C0] sd 0:0:1:0: tag#6211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2957.410028][ C0] sd 0:0:1:0: tag#6211 CDB: opcode=0xe5 (vendor) [ 2957.416419][ C0] sd 0:0:1:0: tag#6211 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2957.425464][ C0] sd 0:0:1:0: tag#6211 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2957.434500][ C0] sd 0:0:1:0: tag#6211 CDB[20]: ba 04:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000005e0006040000000000000000", 0x39}], 0x1) 04:41:54 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x700000000000000) 04:41:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000600006040000000000000000", 0x39}], 0x1) 04:41:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x4) r0 = getpgid(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/127, 0x7f}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000f99c4439150ddb1600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x2120) clone3(&(0x7f0000000540)={0x80, 0x0, 0x0, 0x0, {0x16}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/213, &(0x7f0000000740)=[r0, r0, r1, 0xffffffffffffffff], 0x4}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) wait4(r2, &(0x7f0000000080), 0x1, &(0x7f00000000c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r3, 0xfffffffe, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x30, 0x9, 0x18, 0x10, "16a2020dacf9299214fb6f7f402c988ec46fce90f3c3204e39d952333dfe18e35206b775e035d575fc98d12fee9a8bc15a90b09cbf4ebe2fb1c04faeec9dfdd1", "f174903e93f58e153aaab955a77a9d0473452613026c59016a0a1e509c35680b", [0xf5f, 0xca8]}) 04:41:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4a020000) 04:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000620006040000000000000000", 0x39}], 0x1) [ 2957.651178][ C1] sd 0:0:1:0: tag#6212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2957.661049][ C1] sd 0:0:1:0: tag#6212 CDB: opcode=0xe5 (vendor) [ 2957.667391][ C1] sd 0:0:1:0: tag#6212 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2957.676442][ C1] sd 0:0:1:0: tag#6212 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2957.685502][ C1] sd 0:0:1:0: tag#6212 CDB[20]: ba 04:41:55 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:55 executing program 5: set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r3 = syz_open_procfs(r0, &(0x7f00000002c0)='environ\x00') clone3(&(0x7f00000005c0)={0xa000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2}, &(0x7f0000000100)=""/113, 0x71, &(0x7f0000000180)=""/166, &(0x7f0000000280)=[r1, r0, r2, r0], 0x4, {r3}}, 0x58) 04:41:55 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x701000000000000) 04:41:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4b000000) 04:41:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfd020000) 04:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200ffffffc30006040000000000000000", 0x39}], 0x1) 04:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200ffffffe00006040000000000000000", 0x39}], 0x1) 04:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200ffffffea0006040000000000000000", 0x39}], 0x1) [ 2958.291255][ C1] sd 0:0:1:0: tag#6213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2958.301144][ C1] sd 0:0:1:0: tag#6213 CDB: opcode=0xe5 (vendor) [ 2958.307479][ C1] sd 0:0:1:0: tag#6213 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2958.316530][ C1] sd 0:0:1:0: tag#6213 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2958.325599][ C1] sd 0:0:1:0: tag#6213 CDB[20]: ba 04:41:55 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0xffffffffffffff66, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5392}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0xffffffffffffffff, 0x2) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bf, 0xfffffffffffffffa) clone3(&(0x7f0000000140)={0x80000, 0x0, 0x0, 0x0, {}, &(0x7f0000000040)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) 04:41:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000fc0006040000000000000000", 0x39}], 0x1) 04:41:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4b010000) 04:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fffffffc0006040000000000000000", 0x39}], 0x1) [ 2958.524690][ C1] sd 0:0:1:0: tag#6214 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2958.534570][ C1] sd 0:0:1:0: tag#6214 CDB: opcode=0xe5 (vendor) [ 2958.541024][ C1] sd 0:0:1:0: tag#6214 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2958.550065][ C1] sd 0:0:1:0: tag#6214 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2958.559151][ C1] sd 0:0:1:0: tag#6214 CDB[20]: ba 04:41:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfe000000) [ 2958.670660][ C1] sd 0:0:1:0: tag#6215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2958.680518][ C1] sd 0:0:1:0: tag#6215 CDB: opcode=0xe5 (vendor) [ 2958.686875][ C1] sd 0:0:1:0: tag#6215 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2958.695905][ C1] sd 0:0:1:0: tag#6215 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2958.705052][ C1] sd 0:0:1:0: tag#6215 CDB[20]: ba 04:41:56 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:56 executing program 5: clone(0x84100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10000000, &(0x7f0000000140)="8eb02684e966f4ed631ea0c8809bf357b0332d22a9ca4b1a815c86bd2e691580be94fcff4845d574ee3aa6d1abcb30e1f2ee9d8fd76973d4330031c41f64f729a13db1eba5a1e534bfb460d4c537ba4e548dd408ccd07b2afc2afe1bfebc4383b16a5b3e6a05e9893173426394160a820a05636fde41174b47207df70acdbab5732f46ffce760afa8604c023940161192dffa173547f3199567a23d390ac0a37aa62b4e7f3c446491ba2de66d38d630e38765d77a8e9695135bf1cc924046cce3b144938ec47c30457487991bbe79872ceec8b49e1", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="9a488d23bf811cd0eb9cc67bb381cab003dc66346384283f93d8db3f3b8189b3abc13ac098b5f87a53439eefc63c8fb51db3df477e3ee1bef8ab3518e72fd1d25561ea3c47bf31701916530400a571fbc6077f740cb61f8908e1e40816058a0ff193e893") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = syz_io_uring_complete(0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x4}, &(0x7f0000000040)=""/223, 0xdf, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x0, {r0}}, 0x58) 04:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000fd0006040000000000000000", 0x39}], 0x1) 04:41:56 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x702000000000000) 04:41:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4b020000) 04:41:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfe010000) 04:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fffffffd0006040000000000000000", 0x39}], 0x1) [ 2959.172042][ C0] sd 0:0:1:0: tag#6216 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2959.181922][ C0] sd 0:0:1:0: tag#6216 CDB: opcode=0xe5 (vendor) [ 2959.188869][ C0] sd 0:0:1:0: tag#6216 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2959.197930][ C0] sd 0:0:1:0: tag#6216 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2959.206991][ C0] sd 0:0:1:0: tag#6216 CDB[20]: ba 04:41:56 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = clone3(&(0x7f0000000540)={0x48005000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/209}, 0x58) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = getpgid(r0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) setuid(r8) r10 = socket$inet6(0xa, 0x3, 0x106) bind(r10, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6(0xa, 0x3, 0x106) bind(r13, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) r14 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000000500)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000ec0)={0x458, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@generic="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", @typed={0xc, 0x29, 0x0, 0x0, @u64=0x1ff}, @nested={0xb7, 0x39, 0x0, 0x1, [@typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@loopback}, @generic="0e98ae7448a7b3a63c7ad4c89c835dddee58aa04d8c9d7c0f200e94430e0be99c5523b7b3e82363418438ff8ee5a1b97ce766b4c8706c2f6721bdc9efcc3f9e75695d3fcd327fbda1b4362112cc9c416864978272247f66f073ea2dc7cf8b156f2a0f1633991d8b6e44427e6cdd5c513f339f5579e9b81074c00f11243630678b20489beaccf13fb5fc66ff12721c9d2d1ca4d341ca7fb71c9aa3a2d48654f"]}, @nested={0x55, 0x7f, 0x0, 0x1, [@typed={0xc, 0x3c, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@multicast2}, @generic="b2e32fec98769529bebdb9fd8bc9c0e863b7c9d4cfecaf7181fdab82a34eaf06f0c97203b4980456d9c42306e902366ca129058a99ca98e7a832425f03"]}, @nested={0x7b, 0x39, 0x0, 0x1, [@generic="9be15e132836bc7fcdebc653c675f88ec5843de00e6377ce4d31cc030c549e3456f37c568c8db3fa8aa68021ac5014fa9b1ea90c66e5ca0b87962e95f791cbb544e0e72b32834ee60d803a094abd8a0496f3c2e2879c67f7b28320683d30ce3f90cc2e26ec9c63643343f8b8d9122a", @typed={0x8, 0x5c, 0x0, 0x0, @uid=r2}]}, @generic="4d8677cab94187984bfdb5d0796bbe7d176f50fef2433ed406ef4769522b3a944beecde70393c9130ca5d0263466c182e93f9b6cd06b64eb015d1fe0c9fd11f83dc55ab896dc6e8686b4cb2086a011e8f58dbf47915c44aebb5020fece6ae459d7df5a7534ae5ebd718352a94c4ff13cc671", @typed={0x14, 0x54, 0x0, 0x0, @ipv6=@mcast1}, @generic="01776a20592be06d3a2ae01aa37f989352156c145fe867610c3bee5eb80a7cd3d297eb74d9719ee0eb2b5400a57e613b8a4d573cf6a7268214cf47f717e53fc1596874ad6de4c56b84de7bd8a83cfa7af3c992eff6c36baac84b2c0e74c13e9c5aca6430dbc7d461e40b18d97f738ca1aead1674772f6bc08301dc1d27371efb9d023e8185b559959ec3374a483b024674d1e6500ffe049785bc926fdeda5ab66b13f7da99d3a703c36e652d467df65c1b96ac1a1a128b34c7181da36d0025c5bb941d275d", @generic="97b1b980e2552023922f7da9d0a87bde5366a18eed11da08d0224d0a0e49377afcef11cacaabc9c8077b3f077f280aa6a0faa4bd189b77f4badc0cc0b048e45d7641fdd7d491a32f63bb979815eb0e00b73f3eb364213f5dd53be869ec4274d3bdca04997e"]}, 0x458}], 0x1, &(0x7f0000004d40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000a0ce129c00002418c55310", @ANYRES32=r6, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x20000080}, 0x0) 04:41:56 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000280)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = getpgrp(0x0) clone3(&(0x7f0000000540)={0x340122000, 0x0, 0x0, 0x0, {0x2}, &(0x7f0000000180)=""/225, 0xe1, &(0x7f00000002c0)=""/204, &(0x7f0000000140)=[r0, r0, r0], 0x3}, 0x58) 04:41:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4c000000) 04:41:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200ffff80fe0006040000000000000000", 0x39}], 0x1) 04:41:56 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) io_setup(0x0, &(0x7f0000000040)=0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x106) bind(r5, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) r6 = dup(0xffffffffffffffff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000017c0)='tasks\x00', 0x2, 0x0) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000001900)='.pending_reads\x00', 0x81, 0x120) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r9, 0xfffffffe, 0x0) write(r3, &(0x7f0000001ec0)="2c1484b506ba0ec0ac9037ee43e5e465daa6a2ce7cdbe31e2edb30acc5252ece537d1214187c25d7bdf1fa23f5e11d84a43c50676d5b88404634ccf3771cbc98ded75e61dd8bebdfb3060bde94b6fcdad9db006097ee4c98714710271eddaf9c08d6200469e22d2f4746da2e689b83800ac143eeac0166609f81097129ad3cf64fb9f0938713a6bae468b104eec62f3cf3fc7aae81fed06cfb15d93fcf95d928b8dcc2397b2d1df91cd74f", 0xab) r10 = syz_mount_image$tmpfs(&(0x7f0000001a40), &(0x7f0000001a80)='./file0\x00', 0xf65, 0x4, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)="5f1969a1101ad0cc1a2810ef303df6a604d98208f7506b3f5dadf95e54ef44", 0x1f, 0x1}, {&(0x7f0000001b00)="6ad312", 0x3, 0x9}, {&(0x7f0000001b40)="a81e8d5a91de29d129b39c561c6cd01dbc329c16207165bec2570dac925b66286069c545334a858dbe507c5ae9a7200b1c643945ba795732cb9e1d3e0c48aa41e54ee65cd04ad73f9fff8cf841027c3d587969ff528857a2d8d3b62f1b3435e3a1b3327e982fd0a71a4fe899cb02ca985f304a396b09d8b459d4276fd27da60f79fcef3bca090c442eb501a1b15ce43212cc3132f4f88d77a0b406195cc50f2021cda754f3934cd6ba50a972cd47204168015bfabe5e6c42a8663f29580e66bbdf306f53fa04c981ccea3bd19c6e9504b8", 0xd1, 0xfffffffffffffffe}, {&(0x7f0000001c40)="5eab66f11f67e7d0ea88c328da1b00d861417db77183b9e31eb2add389b33e139741cfed6feaa93ee42d7d1e3a5c16bae0ead362796b9cfaf66c8da445329b547f2716e7f37f72833275c742181a789aa1fb2b5524f900a1da8c03ce9af53867569fd972fb312d", 0x67, 0x38000}], 0x40000, &(0x7f0000001d40)={[{@huge_always}], [{@euid_lt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r11, 0xfffffffe, 0x0) io_submit(r0, 0x8, &(0x7f0000001e80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7f, 0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x6, 0x0, 0x3, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000100)="26f1cab9b0aaa91a288492ab9cec2eaf1edef61a37390950a1fab851b3f912b20b11b93c1583324917e8b6b1657ff9981c5119e0675bf6d3c33fdd78f7cf439270b2a276ca45cded32e3a96b8542b1163e37c37b77b3a9008d80f4b643c73396213edbf4b33e65447b3fafd7e73f456a65e8a7f83eb548c99d429704f33763075884a6b465714ce2ea972a42bdd74002f205ff47039d251d29dc77e8306642", 0x9f, 0x4, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000015c0)="7f5405246a4a6582f58c10a3c94505d8658daf2ffeaf2e26969409accd56900556e30d24c1b7caddb8a6e89ff9700d3992a3a13495ba7c4bb93d6609b6484f81c9ef4ce6435fca418115e062134a2cbee1f569da1e9fb558ef93a8be57f4411d46ff73f5ad347131baf2fc8bde8756411021937cb643cf5dd39c193d749604dae415aa85768f285741e32773c32cdd27377c90d29f4a57", 0x97, 0x53, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x101, 0xffffffffffffffff, &(0x7f0000001680)="9c5d02e2c4c07338784a11c180ddfd246188c02d5fa2c414575cded2af9d2edcfc0bbdddf1d5dfc362d98433da8afb2f9895356bf5477791152a79514bf591b2fc70212b3dac109ba33a3297893cdae3d3bf259d33341132a0754ac24e766e6b9b38f8", 0x63, 0x6, 0x0, 0x3, r4}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x1, r5, &(0x7f0000001700)="266219d54b141ac4a16cc436febdcf7dffebabcb2f2ab32505f3d901d651630fdb2e44ba0b532c835f422de828d78238b36473794e875f01692ae7e5f9ae037b4bef8e667f94a9693594fa7a59a105561b414f0b379316d0bf5b0b7238fb7221dabe0aa6fbb17a98aced815415fa4cfb12a885", 0x73, 0x3, 0x0, 0x0, r6}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x4, 0x200, r7, &(0x7f0000001800)="719c175fd1d7b7fc2d5a621f79544117eb8465022df0e9de677897e5be383026a8243d6c49662d0df07f2bc14e01d68b71354c56d8d4170566e0d87952084b23835dacf9cfada1e9ed1a2cf0f0f47bce4b0ccfbab59ec1881157103c74cc1bf93ee859c0ffca428f619b6f3c234116a99440537dbbdd63a2d58541f579f6f41f1568b537df93a8bc755e93a45ac4", 0x8e, 0x23}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x5, 0x3ff, r8, &(0x7f0000001940)="23b26ac4bfd397a92cc0a5371cbb867cb62935ea8aca0ec8f85a930ad9e4519c3d63538cd2911527403dee8c93b941deb65b4612f4ac680ebd47be71826c28aa0005b2aee657c0fdfe0fe3fabad4ef3c52b7827aca2b8b30bd265042381b9ddce72a39fe5403284e5bbd20375be328e1414e1fa0d24d564ebb7662d4e2bedd614123e706bcea3d7fa9a1c35d76d4306bb24af3ee832ddcf17499e503eb03ded9b9073df1e1", 0xa5, 0x3, 0x0, 0x1, r9}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x8, 0x7f, r10, &(0x7f0000001d80)="9bdbaac7e6324763d1c8a318439bb5e0ffde0b364b32fac60d5f8c085a091730c74f69e78b51bea688d86e3623f19a77dfb8d470d27019d12e3fdcd8cc39282c3fa97295bf9c7d5f6d38e93d2921ea1af220b43b1f3bf34260e6149ee7dc3cd284f59fa2280cefa09efba59fa3994fcee11ac83614d8f706841d2d1eb27770731c23107edcb61255552daf5bb2acb67546b8bbe6bc2f9bde3c9bc1c130f8a043fa7484", 0xa3, 0x9, 0x0, 0x3, r1}]) [ 2959.385148][ C0] sd 0:0:1:0: tag#6217 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2959.395024][ C0] sd 0:0:1:0: tag#6217 CDB: opcode=0xe5 (vendor) [ 2959.401402][ C0] sd 0:0:1:0: tag#6217 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2959.410491][ C0] sd 0:0:1:0: tag#6217 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2959.419546][ C0] sd 0:0:1:0: tag#6217 CDB[20]: ba 04:41:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200ffffc0fe0006040000000000000000", 0x39}], 0x1) 04:41:57 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:57 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfe020000) 04:41:57 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x6]}, 0x8, 0x80800) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='\\--#\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {0x10}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/209, &(0x7f0000000000), 0x0, {r0}}, 0x58) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x40, 0xf, 0xb9, 0xdc, 0x0, 0x5e, 0x4010, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x590, 0x7, 0xe7, 0x5, 0x3f, 0x10001, 0x7, 0x0, 0xffffffff, 0x0, 0x1}, r0, 0x10, r0, 0x1) preadv(r1, &(0x7f0000001a40)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/156, 0x9c}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000001980)=""/135, 0x87}], 0xa, 0x2, 0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000001b00)={0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x400) 04:41:57 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x800000000000000) 04:41:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4c010000) 04:41:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x14850300, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) 04:41:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fffffffe0006040000000000000000", 0x39}], 0x1) [ 2960.034527][ C1] sd 0:0:1:0: tag#6218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2960.044411][ C1] sd 0:0:1:0: tag#6218 CDB: opcode=0xe5 (vendor) [ 2960.050916][ C1] sd 0:0:1:0: tag#6218 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2960.059945][ C1] sd 0:0:1:0: tag#6218 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2960.069012][ C1] sd 0:0:1:0: tag#6218 CDB[20]: ba 04:41:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000ff0006040000000000000000", 0x39}], 0x1) 04:41:57 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/217, 0xd9}, {&(0x7f0000000140)=""/103, 0x67}], 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="00fa719f"], 0x68}, 0x10000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000700)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0xc8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "285350524f6f6628d0fcea16c834aa794d29862c380f77d4ec6a739c4b"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'T\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']\\+&\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\x95\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!:)@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x461}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '*!\xbd--*--\xa2+]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:57 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xff000000) [ 2960.151889][ C1] sd 0:0:1:0: tag#6219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2960.161753][ C1] sd 0:0:1:0: tag#6219 CDB: opcode=0xe5 (vendor) [ 2960.168089][ C1] sd 0:0:1:0: tag#6219 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2960.177141][ C1] sd 0:0:1:0: tag#6219 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2960.186474][ C1] sd 0:0:1:0: tag#6219 CDB[20]: ba 04:41:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054c1, 0xfffffffffffffffd) set_mempolicy(0x4000, &(0x7f0000000400)=0x468b160a, 0x1) clone(0x16000800, &(0x7f0000000040)="f92c9eef86bbf00339c73956af06d4a90dc035a0c2f39722a89b05f65ea0c0a9", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="f70b45cbef43eea75321b512b0d3cb6c") clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x14}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000180)=""/221}, 0x58) set_mempolicy(0x4000, &(0x7f0000000140)=0x7, 0x22) 04:41:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4c020000) 04:41:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000ffff0006040000000000000000", 0x39}], 0x1) [ 2960.319572][ C0] sd 0:0:1:0: tag#6220 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2960.329444][ C0] sd 0:0:1:0: tag#6220 CDB: opcode=0xe5 (vendor) [ 2960.335797][ C0] sd 0:0:1:0: tag#6220 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2960.344845][ C0] sd 0:0:1:0: tag#6220 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2960.353885][ C0] sd 0:0:1:0: tag#6220 CDB[20]: ba 04:41:58 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/205, 0xcd, &(0x7f0000000400)=""/225}, 0x58) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) 04:41:58 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x801000000000000) 04:41:58 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xff010000) 04:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fe80ffff0006040000000000000000", 0x39}], 0x1) 04:41:58 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4d000000) 04:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fec0ffff0006040000000000000000", 0x39}], 0x1) 04:41:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x106) bind(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x1000}, {r2}, {r0, 0x23}, {r0, 0xa081}], 0x4, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400043, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, &(0x7f0000000080)) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002007fffffff0006040000000000000000", 0x39}], 0x1) 04:41:58 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xff020000) 04:41:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200c3ffffff0006040000000000000000", 0x39}], 0x1) 04:41:58 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r0 = epoll_create1(0x80000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x2, 0x1000, "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"}) pidfd_send_signal(0xffffffffffffffff, 0x41, &(0x7f0000000040)={0x12, 0x8, 0xfff}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f0000000140)) 04:41:59 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:41:59 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x802000000000000) 04:41:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) clone3(&(0x7f0000000040)={0x35eeefa2d287e659, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/204, 0xcc, &(0x7f0000000400)=""/211, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff], 0x5}, 0x58) 04:41:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4d010000) 04:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200e0ffffff0006040000000000000000", 0x39}], 0x1) 04:41:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xffffff7f) 04:41:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000240)={0x120000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x15}, &(0x7f0000000100)=""/235, 0xeb, &(0x7f00000005c0)=""/4096, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) tkill(r0, 0x31) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0xc000, &(0x7f00000002c0)=0x6, 0x3) [ 2961.771152][T28885] validate_nla: 82 callbacks suppressed [ 2961.771189][T28885] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2961.810246][T28885] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2961.838618][T28885] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2961.867159][T28896] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200eaffffff0006040000000000000000", 0x39}], 0x1) 04:41:59 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x900000000000000) 04:41:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000) [ 2961.966506][T28905] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:41:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = getpgrp(0x0) ptrace$setopts(0x4200, r0, 0x7ff, 0x31) gettid() clone3(&(0x7f0000000540)={0x17040000, 0x0, 0x0, 0x0, {0x32}, &(0x7f0000000300)=""/204, 0xffffff9f, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0xb}, 0x58) 04:41:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4d020000) [ 2962.030277][T28918] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2962.075017][T28918] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2962.084808][T28905] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x20, r0, 0x0, 0x5) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) gettid() ptrace$cont(0x1f, r0, 0x400, 0x7) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbff, {0x9, 0x0, 0x1, r0, 0x7, 0x0, 0x81, 0x8, 0x0, 0x1}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fcffffff0006040000000000000000", 0x39}], 0x1) 04:42:00 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x901000000000000) 04:42:00 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000) 04:42:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4e000000) 04:42:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000040)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2962.676681][T28964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2962.709386][T28964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2962.711068][ C0] scsi_io_completion_action: 3 callbacks suppressed 04:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fdffffff0006040000000000000000", 0x39}], 0x1) [ 2962.711094][ C0] sd 0:0:1:0: tag#6224 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2962.733958][ C0] sd 0:0:1:0: tag#6224 CDB: opcode=0xe5 (vendor) [ 2962.740285][ C0] sd 0:0:1:0: tag#6224 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2962.749335][ C0] sd 0:0:1:0: tag#6224 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2962.758396][ C0] sd 0:0:1:0: tag#6224 CDB[20]: ba 04:42:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x401802000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000040)=""/225}, 0x47) socket$inet(0x2, 0xa, 0x8) r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) vmsplice(r0, &(0x7f00000004c0), 0x0, 0x5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20}, 0x1c) 04:42:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4e010000) 04:42:00 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x902000000000000) 04:42:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone(0x60004400, &(0x7f00000005c0)="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", &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000000c0)="5d8935d82e2c71c0ab2868110d4657dd5becaa7e30ecd08d80abfa1c16d6e81b7aa6263b8569b38bf969363ed6c5122098761594606b0957501f1e271c8a9a4a14d626662baccb8f1fb67511a450db1eed43d55a2f13790dfcbdc0226d5b6fe51dc83e002fe1aaaba7f565a03f267c7fe3f55c960efa1d797b9582fe92f5a0a32b2e2d5b7f15af4ae924737ff6f78d2353e2c63229437071e4dd940ad537") clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2962.945643][ C0] sd 0:0:1:0: tag#6225 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2962.955683][ C0] sd 0:0:1:0: tag#6225 CDB: opcode=0xe5 (vendor) [ 2962.962042][ C0] sd 0:0:1:0: tag#6225 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2962.971078][ C0] sd 0:0:1:0: tag#6225 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2962.980100][ C0] sd 0:0:1:0: tag#6225 CDB[20]: ba [ 2963.082183][ C0] sd 0:0:1:0: tag#6226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2963.092047][ C0] sd 0:0:1:0: tag#6226 CDB: opcode=0xe5 (vendor) [ 2963.098377][ C0] sd 0:0:1:0: tag#6226 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2963.107429][ C0] sd 0:0:1:0: tag#6226 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2963.116653][ C0] sd 0:0:1:0: tag#6226 CDB[20]: ba 04:42:00 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:00 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x40000000000000) 04:42:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200feffffff0006040000000000000000", 0x39}], 0x1) 04:42:00 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000040)=""/211}, 0x58) 04:42:00 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xa00000000000000) 04:42:00 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4e020000) 04:42:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_wakeup_irq', 0x42bd5093fb38ef37, 0x19) clone3(&(0x7f0000000540)={0x200, 0x0, 0x0, 0x0, {0x15}, &(0x7f0000000040)=""/218, 0xda, &(0x7f0000000140)=""/217, &(0x7f0000000000), 0x0, {r0}}, 0x58) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x20, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0xff, 0x80000000, 0x6}, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x23}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/179, &(0x7f0000000440)=[r1, 0x0, r2], 0x3, {r0}}, 0x58) 04:42:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone(0x2050000, &(0x7f00000005c0)="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", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="0ad115b44c2a480b67f7d04ea15ed8389edc0c36d13be2743645a68b5fe7dd839880bcc6aee20629c2db58ec7076facbfc96c79ae799ec409e") clone3(&(0x7f0000000200)={0x500, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/227, 0xe3, &(0x7f0000000400)=""/196}, 0x58) 04:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000200000006040000000000000000", 0x39}], 0x1) [ 2963.551837][ C1] sd 0:0:1:0: tag#6227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2963.561805][ C1] sd 0:0:1:0: tag#6227 CDB: opcode=0xe5 (vendor) [ 2963.568140][ C1] sd 0:0:1:0: tag#6227 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2963.577198][ C1] sd 0:0:1:0: tag#6227 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2963.586343][ C1] sd 0:0:1:0: tag#6227 CDB[20]: ba 04:42:01 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400, &(0x7f0000000040)="df0742a58a2c56f8c14cd80943e77270e0216b718e525c5d37894471d93645c32e3aac1b675f4b69b00b5e38", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="0c6687851bb84b87") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x80000000, 0x80) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000300000006040000000000000000", 0x39}], 0x1) 04:42:01 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xa01000000000000) [ 2963.840634][ C1] sd 0:0:1:0: tag#6228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2963.850529][ C1] sd 0:0:1:0: tag#6228 CDB: opcode=0xe5 (vendor) [ 2963.856859][ C1] sd 0:0:1:0: tag#6228 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2963.865894][ C1] sd 0:0:1:0: tag#6228 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2963.875060][ C1] sd 0:0:1:0: tag#6228 CDB[20]: ba 04:42:01 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000400000006040000000000000000", 0x39}], 0x1) 04:42:01 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x100000000000000) 04:42:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x48000, &(0x7f0000000040)="aba49c0ce6bfe2de55ca35b4416fb0f9219ee527d532ccf5abb714f9be11748741a6c46588f9fd29dbca49118d455daa6e819569349f15fecf54475977391da8eb8e058d61ffed407d8ba72f0a6b46393961ccb74dfd5d6e60b8013aed55011eafba55536c1947b07b7850e8c40205f298287be8b00a88671978ab8100b56886529b47039e1291002302b6409e1ca4db3c3b89b893a11b0ff0f5de02fd5e6c732c95e6ede08b7934195875817b74551863602478e6d8364b7473e9d544c0e1aadb84db8bf590544b21523867d4e1", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:01 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xa02000000000000) 04:42:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4f000000) 04:42:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000500000006040000000000000000", 0x39}], 0x1) 04:42:01 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054fd, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x6, 0x7) set_mempolicy(0x0, &(0x7f0000000080)=0x8001, 0x200) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2964.489999][ C0] sd 0:0:1:0: tag#6229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2964.499982][ C0] sd 0:0:1:0: tag#6229 CDB: opcode=0xe5 (vendor) [ 2964.506348][ C0] sd 0:0:1:0: tag#6229 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2964.515416][ C0] sd 0:0:1:0: tag#6229 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2964.524454][ C0] sd 0:0:1:0: tag#6229 CDB[20]: ba 04:42:02 executing program 5: sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="62c9ce53f33fb0974370c2210f8cf89a50dd211220b6952b2c9f5180bac603cfea37bb3a9d09e6646c34a7634317a58fc7bc1af2fdf59ced273435ccd2038c6bad1b14a30a47982255d1e0725760705d601ef1e1d7d3f8e0eea460d69bd672", 0x5f, 0x1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x8000, &(0x7f0000000100)=0x10000, 0x100000000) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8044, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) set_mempolicy(0x4000, &(0x7f0000000240)=0xfffffffffffffff9, 0x9) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x4082) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000001c0)={@remote, @remote}, &(0x7f0000000200)=0x8) 04:42:02 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xb00000000000000) 04:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000600000006040000000000000000", 0x39}], 0x1) 04:42:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000040)=""/224}, 0x58) gettid() 04:42:02 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:02 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x101000000000000) 04:42:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000), 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = getpgid(r1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x80000000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, r0, r1, r0, r2, r2, r3, r4, r1], 0xa}, 0x58) 04:42:02 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4f010000) 04:42:02 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xb01000000000000) 04:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000700000006040000000000000000", 0x39}], 0x1) 04:42:02 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x802) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x21c, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CT={0x208, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x34}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x30}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x3ff}]}}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_TUPLE_REPLY={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfba}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x401]}, @CTA_LABELS_MASK={0x10, 0x17, [0x6, 0x22, 0x7]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x204000800, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) kcmp(r1, r1, 0x1, r0, r2) 04:42:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000800000006040000000000000000", 0x39}], 0x1) 04:42:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x7, 0x8000) set_mempolicy(0x2, &(0x7f00000000c0)=0x100, 0x5) set_mempolicy(0x1, &(0x7f0000000080)=0x7, 0x8000a) r0 = gettid() tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$setregs(0x2, 0x0, 0x9f8, &(0x7f0000000280)="6c45f6ab9bb482f47d99c6c908498c54095df4d46788d628e5811a081731dc9aaf6bd8a19012fee6857672ba294705d788110d19f96db1f5e5ab8ba98aa00c73856204c438d0bf8105651cb53fcc45e481575f15bd0153e6d8ec3da622cfc2b7405d4e0363f57b1b65e25d223041ef7d1384980cbdda2cd7ab4a9cffbf1d0f39ab2c9ee19884700a23e46942382124165cf575a326088596e155c0469999c9b18071a08d50e0f6fea2b0b9ea11a4960d99b86f1b1d4db8ecd3adc3226b2dc9b4c2") ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x3, 0x60) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/218, 0xda, &(0x7f0000000400)=""/210, &(0x7f0000000140)=[r0, r0, r0], 0x3}, 0x58) [ 2965.323838][ C0] sd 0:0:1:0: tag#6230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.333704][ C0] sd 0:0:1:0: tag#6230 CDB: opcode=0xe5 (vendor) [ 2965.340055][ C0] sd 0:0:1:0: tag#6230 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2965.349123][ C0] sd 0:0:1:0: tag#6230 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2965.358180][ C0] sd 0:0:1:0: tag#6230 CDB[20]: ba 04:42:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x7, &(0x7f0000000040)="b26b5d4f0115fdccac73fb65aef7608c4be23eb40901709dd5fd065e4ba2b9137356d943cbaf01f4a86c3518423942a9207e74ace7c728962a5016648436aad809f1d5fe2abbab701099f4ce85b4a54223a3ffff97dd76bd6032997821677bf6d0324a16ef39bc71316583047c1bf398cbcc244c8ae753acddb73340001ea24432") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x0, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x21}, &(0x7f0000000400)=""/219, 0xdb, &(0x7f0000000280)=""/240, &(0x7f0000000140)=[r1, r0, r2], 0x3}, 0x58) 04:42:02 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x102000000000000) 04:42:02 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$setopts(0x4200, r0, 0xac6, 0x9) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2965.506578][ C0] sd 0:0:1:0: tag#6231 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.516450][ C0] sd 0:0:1:0: tag#6231 CDB: opcode=0xe5 (vendor) [ 2965.522858][ C0] sd 0:0:1:0: tag#6231 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2965.532007][ C0] sd 0:0:1:0: tag#6231 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2965.541054][ C0] sd 0:0:1:0: tag#6231 CDB[20]: ba 04:42:03 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4f020000) [ 2965.647336][ C0] sd 0:0:1:0: tag#6232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2965.657237][ C0] sd 0:0:1:0: tag#6232 CDB: opcode=0xe5 (vendor) [ 2965.663599][ C0] sd 0:0:1:0: tag#6232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2965.672646][ C0] sd 0:0:1:0: tag#6232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2965.681684][ C0] sd 0:0:1:0: tag#6232 CDB[20]: ba 04:42:03 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000900000006040000000000000000", 0x39}], 0x1) 04:42:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/87, 0x57) ptrace$pokeuser(0x6, 0x0, 0x80000000, 0xeb1) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000040), 0x20000000, &(0x7f0000000080)) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) wait4(0x0, &(0x7f0000000140), 0x8, &(0x7f0000000180)) 04:42:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x200000000000000) 04:42:03 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xb02000000000000) 04:42:03 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x50000000) [ 2966.208648][ C0] sd 0:0:1:0: tag#6233 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2966.218539][ C0] sd 0:0:1:0: tag#6233 CDB: opcode=0xe5 (vendor) [ 2966.224900][ C0] sd 0:0:1:0: tag#6233 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2966.233938][ C0] sd 0:0:1:0: tag#6233 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2966.243006][ C0] sd 0:0:1:0: tag#6233 CDB[20]: ba 04:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000a00000006040000000000000000", 0x39}], 0x1) 04:42:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4008b000, &(0x7f00000000c0)="be6cc7a3d3c8e80a256122dcbe6873ba3b601739d5ed4d5f988d2184d13badc9feadceae2ae08927ba9a4ab63cfb70e5408ebc66b3b3df067b43464fb12025f6a9d55cd061ab42c8533f96430a50cf18ddee621502bd4abd5148ede466ee18c791da2790f482aa81c42c644a132c5e130b48eb84d8a9a8876bca54dec85993fd8db6ae34", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="1ae42fafae4677953822a914b1bf89") clone(0x88000400, &(0x7f0000000240)="23d4c46ab56be6a2c0b6457a43af00c91854958a9e4ca4a9b521035b6ff2120ebe6c7ea2b818d022a0870ff1d70dc27ed12d8af8fb7e49d73604ce96adf16edae2917430516602adfe92c7567aec47e3b6550a09f9c3cd0b9e24f7496122d066b89ab8e4f476d5d3460d01d76991cbc4530219152226ab9792c0330a1531b0108b51c9e85c8e55c1ac0580cb7e4c906a5f09c7e92c927a048d4da683ab7e297350595d777a0b005b2c0a33308cb95ee99389e0a5308e", &(0x7f0000000500), &(0x7f00000005c0), &(0x7f0000000600)="e30e4ee51bb5693e5cddaa467d03181b34633a00d28ef7a3c9172c119321f28978a8f1db256fbaac6fee11bd4f3caae763d59386076320dd2df3a68f5a5058f8666c34ee468f056a8bf59652bddf68850bdd2bee7c5c1e7c7c1ae12e7c239aee71bb65e292b5681c303013e8fb625a73c4fc7b0a7d192a868bc10c63971f9bcc7f04543c18b5be79d4a4477ba2d4ab630a96c7a0b3141ee6b863f388e2e5626c69fcbc62252e23bfd5ea5a23bd47212e07fcf9db08ae515c09187af2a0c815127b83c6b825c0e5cd313b6276a60783a8fa194fb1ffa46ca1b948310945a2386698c63c5a766a2646") ptrace$cont(0x7, 0x0, 0xa4f0, 0x8) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054c0, 0x4000000) ptrace$setregs(0xf, 0x0, 0x1, &(0x7f0000000040)="3a3c554332a221e03864d9a1a64176de4a6c69cbe06060f03c820a0fb398b9374899c15034857ccbf5cf057aac5d2759fc91cb17263f50fa6ff0e7c70f3a804e94e14fef") clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000700)=""/223, 0xdf, &(0x7f0000000400)=""/211}, 0x58) 04:42:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000b00000006040000000000000000", 0x39}], 0x1) 04:42:03 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xc00000000000000) 04:42:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x201000000000000) 04:42:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x1, &(0x7f0000000040)=0x8985, 0xfa1) set_mempolicy(0x8000, &(0x7f0000000080)=0x10000, 0x401) exit_group(0x2) 04:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000c00000006040000000000000000", 0x39}], 0x1) 04:42:04 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x50010000) 04:42:04 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) getpeername(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r4, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r5}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r6, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r7}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250600000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000140002007767310000000000f8ffffff0000000008000300020000001400020076657468305f766972745f7769666900180001801400020067656e65766547000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x81c0}, 0x8004) r8 = fork() r9 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x80480) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000800), 0x4) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000840), &(0x7f00000005c0), &(0x7f0000000600), {0x11}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000000640)=""/181, &(0x7f0000000700)=[r1, r1, r1, r8], 0x4, {r9}}, 0x58) 04:42:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x202000000000000) 04:42:04 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xc01000000000000) [ 2967.101972][T29371] validate_nla: 49 callbacks suppressed [ 2967.102030][T29371] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.117513][T29371] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x50000, &(0x7f0000000040)="25c48aa26edafcfe651179810c0e5c0ea7f99c793952f4f3667c664c5855e5a339bba913cb3abc9ea13f72800852d9bf7e48ec28ce42a7b1666358b83aec7b112e9ca646f9b304fd1c25a26f39754e9d140d4371", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3245e00a35de94e8be011360e7621f7c9fd01e958d2bcc1dc8c46880e44f87cf7b70c10a9dc7098f63f99d2532103bb28d61063bc856bd0e8934944ffd992218e6a1182131ed1c873826610a416f84b373e8746342f38d3b84823807b2f8641bd08453e8bd53038704bdcc3ff795f76f7fa4eaa72e84d9be7376a4f739b0e3622699cbd3638deabf66e927fbb04a8f80a6e65cad60497b8b14c2a6e54bc2a2c91139b4fedd42f5ee08c468d300f501cfac39fecefab0195c53bd0e8bbe89e7cbadb555b813a836edcfaa8c85b80c02ee5c") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000d00000006040000000000000000", 0x39}], 0x1) [ 2967.157606][T29371] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.180864][T29381] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:04 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xc02000000000000) 04:42:04 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10040, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000180)={0x8, 0x18, 0x1, 0x2, 0x1, [0xfffffffc, 0x7, 0x10001, 0x1]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0x4, 0x5) set_mempolicy(0x3, &(0x7f0000000100)=0x5, 0x101) r1 = clone3(&(0x7f0000000540)={0x20008000, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) set_mempolicy(0x2, &(0x7f0000000040)=0x3f, 0x5) set_mempolicy(0x4000, &(0x7f00000000c0)=0xfffffffffffffff9, 0xffff) pidfd_open(r1, 0x0) 04:42:04 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x50020000) 04:42:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x17}, &(0x7f0000000300)=""/212, 0xd4, &(0x7f0000000140)=""/212, &(0x7f0000000080), 0x0, {r0}}, 0x58) [ 2967.277195][T29391] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.326901][T29391] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x400, &(0x7f00000005c0)="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", &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000100)="143ac0c7cfa204e13cdcbdc38fdab42966f85575cec0013da870e7442c6bec02adfe363c5b0398732e02e8ec749a48eb4cc5dcd02639b8689c372fbf3671ad2d83671d3191849c3c09bd069c9d963f3083ebf663f48a8ad9d0077ce190921b8a600c474f3df1904ffd5cc9e14f570eb38336992bd32b776754d455b0c716f79432a240e7") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x1, &(0x7f00000001c0)=0x1262, 0xf2) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x4) [ 2967.367690][T29391] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.401883][T29421] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x300000000000000) 04:42:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000e00000006040000000000000000", 0x39}], 0x1) 04:42:05 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x51000000) 04:42:05 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5302, 0x0) pwrite64(r1, &(0x7f0000000000)="03", 0x4, 0x4010040bffd) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x80400000}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000140)=""/212}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') pidfd_send_signal(r2, 0x7, &(0x7f0000000040)={0x2b, 0x2400, 0x4}, 0x0) 04:42:05 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xd00000000000000) 04:42:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x301000000000000) [ 2967.975077][T29467] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.984218][T29467] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2967.989490][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 2967.989517][ C1] sd 0:0:1:0: tag#6237 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.008835][ C1] sd 0:0:1:0: tag#6237 CDB: opcode=0xe5 (vendor) [ 2968.015192][ C1] sd 0:0:1:0: tag#6237 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 04:42:05 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) gettid() clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0x4) 04:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001000000006040000000000000000", 0x39}], 0x1) [ 2968.024255][ C1] sd 0:0:1:0: tag#6237 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.033305][ C1] sd 0:0:1:0: tag#6237 CDB[20]: ba 04:42:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x302000000000000) 04:42:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001100000006040000000000000000", 0x39}], 0x1) 04:42:05 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xd01000000000000) 04:42:05 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x2, &(0x7f0000000000)=0x10000000000054c0, 0x6) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f00000000c0)=[r0, r1], 0x2}, 0x58) pidfd_open(r2, 0x0) pidfd_open(r2, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0xb, 0x7ff, 0x2}, 0x0) [ 2968.237140][ C1] sd 0:0:1:0: tag#6238 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.247032][ C1] sd 0:0:1:0: tag#6238 CDB: opcode=0xe5 (vendor) [ 2968.253390][ C1] sd 0:0:1:0: tag#6238 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2968.262448][ C1] sd 0:0:1:0: tag#6238 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.271500][ C1] sd 0:0:1:0: tag#6238 CDB[20]: ba 04:42:06 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0xf02e25c4da34fcd, &(0x7f0000000000)=0x81, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x7f, 0x21, 0x2, 0x0, 0xfffffffffffffffe, 0x8, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x1, 0xf04, 0x10000, 0x6, 0x0, 0x57, 0x0, 0x0, 0x2dc, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r0, 0x4) set_mempolicy(0x4000, &(0x7f0000000100)=0x7, 0x2) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001200000006040000000000000000", 0x39}], 0x1) 04:42:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x400000000000000) 04:42:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x51010000) 04:42:06 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xd02000000000000) 04:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001600000006040000000000000000", 0x39}], 0x1) 04:42:06 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f0000000180)=""/220, &(0x7f0000000080)}, 0xfffffffffffffe65) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x800000000000007f) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="15dbe8d37745ea02a40df06cc64be5ea8f85d48ef0b34fe9eef2f0a5", 0x1c}, {&(0x7f00000005c0)="9aa979570fb3366f60121f04a592908eb0d25c5aa407b89e1e22502a528e36e7e22e8bbbd3aa6a59f7c1be281386b533df960126973c4599f62580a49be8e6fa0af380eca9cdbbe65f7912b52e20ff6a67796e6dab28f717d72a289f5bc1099d45a508d6bf75f1d97e12b109562b045491499ab0a448fec0945924fdbe205f7c1be29b489d6931bc6e3ba8f9da57b9b141a9cfe85c53a7e51369855e194f947df6", 0xa1}, {&(0x7f00000015c0)="f764450528102bde3b6d511d51b63acf182bcd9e165573374bbba77dbdb1231b2ab575434097a3946f77b97c62e76a8376d3c1d5cfe9b414f82a68ea028a03303e82059d96ce9978ef8d06eb6af2ad7715f6e5f57253a2fa5b46e7d7ef3ce1df45bf936cb511ca64d71986239e001fbeb73147d430923da1103aa426b792acecec27d65687622434", 0x88}, {&(0x7f0000001680)="e3a41002d285adf0cd65e90a534f1c4121fd72cb47d3964888682a8c6eec72295ecc2ac7ffbcb3576c56afb8613f445e1e01e857d49e1b77f6bca2835c96fdd208c3a1d244228442d5dcf9c142b82a314d9d976969a631e32e0b8e3276b0fa30134cadc16156e53103135c89738b80f7f46bd87f7b4724dff9336bb38be0fe7b16c81547b63b2ae2a2e0c6cf760db4277b8f3c2cdd15738d08", 0x99}], 0x4, 0xcf526934d9cb4631) clone(0x100, &(0x7f0000000400)="46593786e631775a1b31542f13c4074582d6b2f222b87f76b35ef3cfd30ef15d43fcdb57ba95180dcdd5ebcde4b4364e5da5ee8cdd39969a22d5c96e5d11e39ebe01a5ebcbda548c33cd5e96f43a07cd996a2f11cb917d2511b8948aeb5e6dda462aa43e3cb6235b0b0e4dea9cc1bcd1eb062b2d0461b592cf26a11108b9c429edd126", &(0x7f0000000500), &(0x7f0000000680), &(0x7f00000006c0)="32fb3ffd16f1026227b03e5b0fda97af17a186de24934c96f96a70cd1dd951ffa3298cf7881f6cee969f72f8446c81dc65a74f25db8bca42c143dc5de816c55155dc2026ea9ef0b9728d658dd6cd301ae8443ea5028522f163dd3125a38b9e10b5cd3eaca622c3799efb4f02ef84efcbef82fec43bd0a9a5f70ecc2fc10a46156d34be0173f16892638b19cbf29b4341") readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000280)=""/81, 0x51}], 0x2) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000008, 0x30, r1, 0x3dc25000) [ 2968.879268][ C0] sd 0:0:1:0: tag#6239 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2968.889145][ C0] sd 0:0:1:0: tag#6239 CDB: opcode=0xe5 (vendor) [ 2968.895495][ C0] sd 0:0:1:0: tag#6239 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2968.904634][ C0] sd 0:0:1:0: tag#6239 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2968.913864][ C0] sd 0:0:1:0: tag#6239 CDB[20]: ba 04:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001700000006040000000000000000", 0x39}], 0x1) 04:42:06 executing program 5: sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000024325053735c77a06ac8f620d6b66966544b0270f476f645b27d048e9de0d2e9ddebf8490db79047c897300d8915f70d1cd0ae4d18d868122b306b87513a9373a10b5baec34037d743c2d3568757cc9f9f29d67aeca19f410948cb427a1ea66469ee1808aa776e17d9912b8568", @ANYRES16=0x0, @ANYBLOB="040026bd7000ffdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) wait4(0x0, &(0x7f0000000180), 0x20000002, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f0000000040)=0x8000, 0x1) 04:42:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x401000000000000) 04:42:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001800000006040000000000000000", 0x39}], 0x1) 04:42:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x80000000, &(0x7f0000000080)) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000140), 0x2, &(0x7f0000000180)) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x51020000) 04:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200001900000006040000000000000000", 0x39}], 0x1) 04:42:07 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe00000000000000) 04:42:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x402000000000000) 04:42:07 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe01000000000000) [ 2969.733202][ C0] sd 0:0:1:0: tag#6240 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2969.743079][ C0] sd 0:0:1:0: tag#6240 CDB: opcode=0xe5 (vendor) [ 2969.749410][ C0] sd 0:0:1:0: tag#6240 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2969.758547][ C0] sd 0:0:1:0: tag#6240 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2969.767587][ C0] sd 0:0:1:0: tag#6240 CDB[20]: ba 04:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200004e00000006040000000000000000", 0x39}], 0x1) 04:42:07 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:07 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x500000000000000) 04:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005000000006040000000000000000", 0x39}], 0x1) 04:42:07 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x52000000) 04:42:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005200000006040000000000000000", 0x39}], 0x1) [ 2970.016862][ C0] sd 0:0:1:0: tag#6241 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2970.026747][ C0] sd 0:0:1:0: tag#6241 CDB: opcode=0xe5 (vendor) [ 2970.033106][ C0] sd 0:0:1:0: tag#6241 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2970.042143][ C0] sd 0:0:1:0: tag#6241 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2970.051196][ C0] sd 0:0:1:0: tag#6241 CDB[20]: ba [ 2970.112946][ C1] sd 0:0:1:0: tag#6242 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2970.122821][ C1] sd 0:0:1:0: tag#6242 CDB: opcode=0xe5 (vendor) [ 2970.129153][ C1] sd 0:0:1:0: tag#6242 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2970.138201][ C1] sd 0:0:1:0: tag#6242 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2970.147247][ C1] sd 0:0:1:0: tag#6242 CDB[20]: ba 04:42:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:10 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xe02000000000000) 04:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005400000006040000000000000000", 0x39}], 0x1) 04:42:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x501000000000000) 04:42:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x52010000) 04:42:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) [ 2972.736935][T29697] validate_nla: 41 callbacks suppressed [ 2972.736949][T29697] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2972.752214][T29697] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2972.765595][ C0] sd 0:0:1:0: tag#6243 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2972.775441][ C0] sd 0:0:1:0: tag#6243 CDB: opcode=0xe5 (vendor) 04:42:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x51002000, &(0x7f00000005c0)="5dd7151c277719b5678e2a62b3d26a4f568e50bebf46c2eeb159d63e43a14c10177dfb62c61be5b4fb404c802b5da15d2565aa43d67f758c891fc8430b0cf7a891ce598a0ae71a814bb11bf445c2fe1e39720875a58e13903e97815dd9f27c70ee86a674e6eebe2125506ca2930feeb48376d2725beca1211052efdfa83d0d16f70667be22a6066f50d28bd79f4d13126bc05f7acd4856d5e085a94491122b8d7c04f07947ee90d7d15e6cf14227e1a1832b654c109f6fddb4649442e1da9a4b80", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000006c0)="35acaefecae16cfcc90bade553cadcaba60542f9ac6b57154c2e6de8f787d844e7766d24828aaf71dde12fb6b5cb9cec20ad3882c756e46c896c1eb76d9bffab3bbe67d740bb3303bc11e756500489844dbe0e428420ba67d337a13a4318923f4ed9ec5a34b73f98bb61c491f43d96c232b558a9a44c55f20772be5bfc9acbb9f82549c30a0566901e3b41fdd6573132772c54ee9366e5b06fdf59ec") tkill(r1, 0x23) clone(0x30002100, &(0x7f0000000080)="52e4b5c7d37f0816fda8dbe000551a14b379774234fb16d0a4ad6300d4c6aad1613696f088e278b0bc39ea3c22841143986b08fea6289011d2a2e24af16bade03ab2ad99da1666761d7ae85e90e1ea207dad571cf4cabb17b2d4fe6e2a5ea3d7a13b615723266098aad1dc929c9f70eb86fd6b6e1ddbf88fa2af2bcc8a643681c0caa441867d6b2e92d00c1cb4a56d3290b9fdd8a105459aa862503caacc9bd01a9d87a4ff3c8019177d3d8f04f25d541f5991233953688996dd95867512e5fd5b10b4d2f3617cfe15ed6f58", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="c9c95b946568e4f4dcdeabbc53bd13aee80254919e82f343450eaade7a72262c49b81685a26b545b4146ab4898") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='@^\\%') clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2972.781784][ C0] sd 0:0:1:0: tag#6243 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2972.790825][ C0] sd 0:0:1:0: tag#6243 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2972.799842][ C0] sd 0:0:1:0: tag#6243 CDB[20]: ba [ 2972.824835][T29697] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005800000006040000000000000000", 0x39}], 0x1) [ 2972.844090][T29710] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:10 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf00000000000000) [ 2972.902224][T29722] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2972.916448][T29722] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x200201000, 0x0, 0x0, 0x0, {0x4000009}, &(0x7f0000000140)=""/230, 0xe6, &(0x7f0000000040)=""/222}, 0x58) 04:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200005e00000006040000000000000000", 0x39}], 0x1) [ 2972.946408][T29722] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2972.955543][T29726] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:10 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f0000001d40), 0x6c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/86, 0x56}], 0x6, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/177, 0xb1}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f00000009c0)=""/107, 0x6b}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/24, 0x18}, {&(0x7f0000000ac0)=""/92, 0x5c}], 0x7, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/162, 0xa2}, {&(0x7f0000000d80)=""/26, 0x1a}], 0x2, &(0x7f0000000e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/39, 0x27}, {&(0x7f0000000f00)=""/108, 0x6c}, {&(0x7f0000000f80)=""/205, 0xcd}], 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000004002000000020000009460352f8f1ab782a40800000000000000c7a771d6b601806e0857d9c9e01908fdab7075c6eb3cc4b7cb5b07fb1bb77376fdff0b10835e606f407954b98db471", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x170}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/12, 0xc}, {&(0x7f0000001300)=""/75, 0x4b}, {&(0x7f0000001380)=""/159, 0x9f}, {&(0x7f0000001440)=""/219, 0xdb}, {&(0x7f0000001540)=""/34, 0x22}], 0x5}}, {{&(0x7f0000001600)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001680)=""/141, 0x8d}, {&(0x7f0000001740)=""/124, 0x7c}, {&(0x7f00000017c0)=""/26, 0x1a}], 0x3, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001a00)=""/247, 0xf7}, {&(0x7f0000001b00)=""/58, 0x3a}, {&(0x7f0000001b40)=""/25, 0x19}, {&(0x7f0000001b80)=""/164, 0xa4}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/32, 0x20}, {&(0x7f0000001d00)=""/56, 0x38}, {&(0x7f0000001d40)}], 0x8, &(0x7f0000001e00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x7, 0xc0002100, &(0x7f0000002000)={0x0, 0x989680}) wait4(r2, &(0x7f0000002040), 0x2, &(0x7f0000002080)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r3, 0xfffffffe, 0x0) wait4(r1, 0x0, 0x8, &(0x7f00000010c0)) write$eventfd(r3, &(0x7f0000000a40)=0x2, 0x8) [ 2973.035168][T29750] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2973.046348][ C1] sd 0:0:1:0: tag#6244 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.056200][ C1] sd 0:0:1:0: tag#6244 CDB: opcode=0xe5 (vendor) [ 2973.062572][ C1] sd 0:0:1:0: tag#6244 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.071623][ C1] sd 0:0:1:0: tag#6244 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 04:42:10 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf01000000000000) 04:42:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) clone3(&(0x7f0000000180)={0x304020300, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x3d}, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f0000000100)=""/5, &(0x7f0000000140)=[r0], 0x1}, 0x58) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) tkill(r1, 0x2b) 04:42:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x502000000000000) [ 2973.080857][ C1] sd 0:0:1:0: tag#6244 CDB[20]: ba [ 2973.104336][T29756] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x52020000) 04:42:10 executing program 5: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2973.232492][ C1] sd 0:0:1:0: tag#6245 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.242494][ C1] sd 0:0:1:0: tag#6245 CDB: opcode=0xe5 (vendor) [ 2973.248833][ C1] sd 0:0:1:0: tag#6245 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.257899][ C1] sd 0:0:1:0: tag#6245 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.266958][ C1] sd 0:0:1:0: tag#6245 CDB[20]: ba [ 2973.346627][ C1] sd 0:0:1:0: tag#6246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.356504][ C1] sd 0:0:1:0: tag#6246 CDB: opcode=0xe5 (vendor) [ 2973.362859][ C1] sd 0:0:1:0: tag#6246 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.371903][ C1] sd 0:0:1:0: tag#6246 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.380965][ C1] sd 0:0:1:0: tag#6246 CDB[20]: ba 04:42:10 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200006000000006040000000000000000", 0x39}], 0x1) 04:42:10 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf02000000000000) 04:42:10 executing program 5: clone(0x823a3100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x61204c80, &(0x7f0000000080)="ca12328761e49568a4d5b6eeeb1e6c", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="a7e96596055ae62eea9e3d179c22f48851fd65f0acac3404ec247ea8aa471ecc573907b4b0e29f4e08c8b6e6fd") clone(0x4844400, &(0x7f0000000180)="284c3f53a8fbd27544d92d3682157bb267485c979087f81f057b0f255db64291f42fdbd16562747aca505128ad0dd92d26da364fa9de23d8541980e6c1b5993c933c3fc9a4", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="fa0a11b7d5874da3966ca539b08566ca86c8bd7761e955affd0d88ac74de1ed6b13cb9635267e08025819fd6b32d23e18637d5898ece28cf1e2d12d04602a8ea395fa8c0db9df355c23859445a20d49e8771d2f7caff3c3ce9cbc7a4a5a1031ab9197a8733") wait4(0xffffffffffffffff, &(0x7f0000000040), 0x1, 0x0) r0 = getpgrp(0x0) wait4(r0, 0x0, 0x20000000, &(0x7f00000005c0)) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:10 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x600000000000000) 04:42:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x53000000) 04:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200006200000006040000000000000000", 0x39}], 0x1) [ 2973.621955][ C1] sd 0:0:1:0: tag#6247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.631837][ C1] sd 0:0:1:0: tag#6247 CDB: opcode=0xe5 (vendor) [ 2973.638200][ C1] sd 0:0:1:0: tag#6247 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.647250][ C1] sd 0:0:1:0: tag#6247 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.656433][ C1] sd 0:0:1:0: tag#6247 CDB[20]: ba 04:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fc00000006040000000000000000", 0x39}], 0x1) 04:42:11 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x20000000, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) set_mempolicy(0x2, &(0x7f0000000040)=0x2a, 0x3) 04:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fd00000006040000000000000000", 0x39}], 0x1) 04:42:11 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) syz_open_dev$sg(&(0x7f0000000040), 0x7f, 0x1) 04:42:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x53010000) [ 2973.914383][ C1] sd 0:0:1:0: tag#6248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2973.924259][ C1] sd 0:0:1:0: tag#6248 CDB: opcode=0xe5 (vendor) [ 2973.930616][ C1] sd 0:0:1:0: tag#6248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2973.939637][ C1] sd 0:0:1:0: tag#6248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2973.948686][ C1] sd 0:0:1:0: tag#6248 CDB[20]: ba [ 2974.013137][ C0] sd 0:0:1:0: tag#6249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2974.022989][ C0] sd 0:0:1:0: tag#6249 CDB: opcode=0xe5 (vendor) [ 2974.029354][ C0] sd 0:0:1:0: tag#6249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2974.038371][ C0] sd 0:0:1:0: tag#6249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2974.047489][ C0] sd 0:0:1:0: tag#6249 CDB[20]: ba 04:42:11 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000003000006040000000000000000", 0x39}], 0x1) 04:42:11 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x601000000000000) 04:42:11 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000000) 04:42:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x53020000) 04:42:11 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(r1, &(0x7f0000005300)=@ipx={0x4, 0x3, 0x6, "4f8442b2c44c", 0x81}, 0x80) r2 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r2, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000019c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x3689, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0x8db4) sendto$inet6(r0, &(0x7f0000000040)="973a50fcf7ff8e21d5d3974ede7c2887bd76d995a7280f1be85146644aa1d16efc025b266eb2b237bde5fb92aae1f8cc4df3acef25c673ea03022bac1e7de24af33068b59cd06149b6daa71f658cfcd2e72acc18b5cb176fc92dd18a4d287348b47368fe6415acc389400d9c51c16c", 0x6f, 0x400d0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r7, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r8}, 0x80) sendmmsg(r0, &(0x7f0000005140)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x7fe0000, @loopback, 0xffffff80}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000180)="9bf0d32974c07de9fb21caf4a1cb158c4cb11a56ca10f4e1c00d3d28cb2577e1932418f7ad1dab9ecae55a1d83f7d80dd7dec461f2011978e2d5e3fa724bcec6915f9ca40b60a7e3528872fc5835558ed155cd4b4c502e3f518bd05e49c6a3d3f3adfeeb46b589dbd959cbb1f2dd01dff6ef83414d42f0d53b13aa3e4421799e746202a2c4e4cb18024e9ba4ed793c41fbb1237220f9f5388d82d846f719349deb989c381eb4b37a9365869114c736867da22f2cc6638b5dfdb7ced5d03f04eb2444238e1d31c7ba11205ac82d7370d15c1ffffbea6c4d", 0xd7}, {&(0x7f0000000280)="2b935669c482061f665db130bbeebe5fbe67a74a986dcbd1131b71fc9d813821f1383dec0f283b8c87a763935a4298b32af09358714d461d5b242120480cc0ed3e661b968c3bd52a50a15db89613bb9d561cf0bf527c6b5cd194075762a90d5db4158ae1f9aaab1c", 0x68}, {&(0x7f00000005c0)="bc18cfbbe1ba684584d2889762d41a37ab607834a97ef81de5563ebd9250ec87d2f2152acf5b140c4212d45c5a45b9b8f62ed95d63b3e565a6f1957643fd94ba128efa50af21181ca223afe96b1628f064982c1f226c095e510ee705648c0a35cc688c72de7fcf45853b0a7182e77ab4463c71f16dfa2dba23e21ed7c30779cd97d2886059de3c888276c2d020d7ce6f16fe14aebe0f808fa15e74d488cc1d", 0x9f}, {&(0x7f0000000680)="40f01b1dc764b7b27a5cae3ecbe9ae02a2198b777332bfb9619b9d5c6043e54452f5a01f554de9b098684829d969d01e72431f818a5a858ca0faa929d191d78ac61e76e4a4671b38bfb59282ee398cf7ec379168266ab2a60bb6ef9bae2817b80c0f9b72e55b85dd44861dd6e46a6140551a38db7adbd45b6d796a8c49dbb4955c9afe9d1fc43371a3f0d8e91bfc7bb3b22367f8273a8424a6f97451f3d76395f8beb78036dc3db4c9743ba5ef95d48a70cf33aa9464eb", 0xb7}, {&(0x7f0000000500)="861021899847ebb4911fc53fb4dfdf", 0xf}, {&(0x7f0000000740)="d95a640cba18433dc996e9592eb76f6e2e2f3e2215cabc1fed0bbb03d90d5a0554bcbd6c0d9b0b97225d0121ea24d3c29bb33b2e01624963fdf9cbe25925f8fbec166e0544c2c96114e199559d13f9e65c809d2996089f1d8b3b68453704cac922c4cf43420ac376f09552d4d4dd8cd6460b318b30929de7aefdca56e9bff9a5133dde973c2e490a3b0e2b9d3edf1cf0341ef47bb64bf5f81070022071ddca0b0daac699f02d00d4b0d26aae19d00e", 0xaf}, {&(0x7f0000000800)="c4a3d90845296fd24c22a18bd58ead6924c15549d965b9b6506e46cd417946d3928e6f4f7a83e8e68d008f02cb09584b390da25573cd0b18d5e85fe66a1844acaea34652899cef1936730017e4a047cdea107b94338a3caa95f29c728dc036ab4c7a368a7457490ba9beb589fd2826255e187f797ea18594", 0x78}, {&(0x7f0000000880)="1c0befc0674ab8bdbdbd23b4c581b10a563afcb3004b674d24cf53c14e08b2e8bdb20230b87ffb77224198a79a1ca3c620fa739ba3bc0f1a0403cdd7af1e871dfb0b4497ba9657a39be900ff730b14a4f4b45a465d094539eea21e774f5b3e2a718b171ee0f41e88574c116ef3c0a6faed1de7dae221969542c3", 0x7a}, {&(0x7f0000000900)="2a63bc0f392a4ff3ef188e914d56229982021762fae72e0a9636e7f889cf83f45fec1c4bb5a61f85f4eadfcc2e7dccd4ef1024d94f2fb2d3cb7fc500b8a0ed9b8c99b77f9d79317004451c3ec8592890f61a6e7cbc4e82a5ed03be7f2e0477c474a4ed6aa32d7cfc6246ab7a31534e6f1b39e2755ba9bcb15fff9e9d829b92cd2f4fb72adaf1008aba56d737f9b57dc248c5c5b5c2fb8494f2bb87f06751889f2e36c191665b854c47371cdf439492752ee8efbb6c8c5d95c53a14bb5f0a2f90f44b5b368f29a3dac5d2d9d623f0d992b2f795780160015426a4f3ae330b5e0194f63977b7500d818b0aa883529f184332b464236c772e8ce539e151b961f208485eb9f3d37a67770bb89e355f4ea49415626786d95cef1e36312352083deb746e57e0a33841f25f95c6c985e038cc4e4b48ac16f0c8e3fe1c301829d6698cf8712def40c9844ea64f82cbbaf8c910f0bcfe76818bab24f709f4731d12782b933f0feb7c41f6c74749c60b03a89dd6c4e61630c2f95197a0bdb89084dfea0a9fde610624eea27c4f3fce4e18216b811fcebf528233333c39975dac4b0404cd53aba8ac2fcd06a73237380e118d566abf122e4ea532ad29705dc2cc5069803e2868cb5a7d7ca237aa10fbc58812a915d94eaad4585fb54e01f2454b5878a885d5e32d14a067c1c74c0ce361b0d2e7d1e0b29e4c73736b5059e9d92f77d613ee20f61a7117259d30ae885d5b22e961fb0fab0f7fb4666f1d238625bca10236fec21b325e73cb70168676dacc0c5207b0f789124c94fe7f9efca5cfb56ba35787278d76ba372e0ea9d81ca588643a455c4c9f6b1a0d27a366703de4c48f2424993b53790dafacda9e130f9886c0733412ae965671e56470015d7e30bf95d32c9236b10362e56819d68b8a9c84be02acbff9b0023b5653a07548cf05ce07b80f070eb8853ef0fc64a3407fb39b75a42d95c36e1925687e50ac9536f5b83c15041adf630099f2d3aea98bb7083cfda4b8f05a614b40b526385497a9ae994723a577452906d4af495f3f0958ca7c450df66bce9ba8e3d69ceb55b90794d4c8025b8600167430b2cff9b7989105b8720c69891c08e5d6dea38333f5e89c18bb2d19f1f05a07460ede0a49e3f660fce092dbc8b1bab0aa5fd3ccc53c2b6a89ff18b00844edc38a04e50c0029074d52070bbb9abadcf19927af5c9b8f11fdf642c52c4da5ab585eee878f1b7128db1a23ddc8b8ae9dbbffe70b9bf9d54533ea8efe5fa9800576f9aa2657d0972447b59fce9f7add7e5d1953ae4c17f3bca3c65b278ea531279f4204daa247c5ca9bc0c7d0c9ffc40c2f06ca9b215cad35f2d0adeecfc0d4d35996665f4598f65b42f960daecc801f694c292436a4e6744478c1ce8ae57cebb676f2e57a3889465f7c6bbb3a4c546047b8907e28699d7660515814ada4a167647d8b1dd441e8cf215a5611f6d1a992f65196260f86a145a5d5621f24a91f1e763625381db2d43f1ad242b6543f2409a2f5fa5c42c0c3c2941b8758818b1acdecf5111209a19d1208c1b5ce7e990bbe33936fe6f3666e90236c5281bfadc90d54e08bfc4e00b24ec6d20e0a3c13cf9b52b0dc55da4b3a297e47d1c59dc8bd4e1fb2fcb5721226fb0123f3c95ae563393520bf82ac4547567d9b359f756c707533894476257243498450800a184db449d42ac6aa8401284aa8e2ae4eb6904533d1adfb2a43a346c45bcb344e2007e562b453efbd761a316261ad8cc8d6c22790458792aac1af6d904c9058ec8a8a807d0f7bec3cfcdeb579933ff7fcabbb37dcc426b856c86c7188a017ab9afe09eb8309bb0560189d95582aa52bb663a4c7e99c857ed100a84211d975bfad9e2a5f33d2718898bd572d6f28bf548d1dd881b466edea90503366506a587c56bf4e64d55c2a5edfd75542066f5551db76deaa72f14ec06f827cef7efbaa9d191a516e576ac2cac42f8d5f3c005284ef995b29600fb39ebd0a788a90294c40ff8228d46848b5b02981c5e4dda3a1157ed9ef344f61e56f0042aee5bc3b9e1bf159210a3f9ec5f44a4fde635318f88ce2def2a869cfc3033fac4b23b60c4b108ada417a20f3d01ea4e9d107a9f2f4ab1a48c8184cc24ef6453a7f8c75ddcbaa66b0849a1d61eab2777c30eb27cca252d1d6dd9cfa713fb98651693b6f35afbcf48ca7fbfadd20d07a6c934fc0b5baf69896fb47111c7020f9c998034977b0b2ca72e3b43125b5b9b575f71c968a9b444a831b1615bac55702c1469d7ceb947a9ec96238d96cf76c1309edb9c6a1c27d1a0b60a5d952d7383311c0246360c56748ad207190c49764dff623c295445dc9c1c2396fe48d9ffad876f3cc7a1e5318e92ecd64cc560a1fd17dde4b1ebbb094d27aacf6b15d69d7b9db1ee7fdaf597f8417e59d77d2d1cc6266b14f09289e2fdb9f123e5f102ab2424af21d3a3526f2c8f69e8dfb2aac28ed8ad664a1fdde00be43878f89e3e09590c700dc18cde6ce060fac014d6d81d1a29a71d60a11136b1fc33109cda6b660d7f9bf7a7f784cac6b2f8b27611547ea4d9789b3d441d3fe6384d1dbdd98c85b141db3579b8bea0926907c6e0b750c3da703fb0a74f6f479899caa7409c8c8607b64d3875926d387cec51398158196f253e176c030bcd3812659f14efd00255e348f7b6669ee5d5d6b13f6e3bf84584750d0a7184f089c7bcafd750a0e164368757848359c1b03fb67fc116d42660628b83f9452e53972d026b1b071cbaa40aa6014e42eb57728175410ef7242dbbc39bf1f1d255742f124f662b2589eb6a3415eef56204ab3b5b74a2d0d699921eaeed1cfaa3e2d8cca168c14100e9dbeb959236605668dee4edd92e717efc84f941a1766bbde7fc9e365a7e533eb6322dc922441703e11a83d04b440cd609883aaf0b0b65d129367f52f8b5dc7f4f72428878688bb3fb01f625ec8a4fef2cfbdb77d44e5255d5a9036f441eeb8b9304a7b5168269070e830915b3a0e26b7e5e47b3fdcbc400b53fb79b55eac520e19553b1d53bd1cd5f5e069c80dce45fc1c2dd09fbac7cf4c1c14e4e5f4666b18003fb55210f8d3f0800fcb66febea1a63fc3dff8ee6c94deb0275f4e8e8302272807cd18e9fedd114e79b411a988fa89eec31663a44ddeaad077e43212b4c6b8d52a13ef5b8f4380961caa49d216d4532d361b733772a1eb74988d8779739cf1e7391cc365c58c245c70a5a3355978ec64a7ce9ad701a124123e8321483fddd94d22275de5364ea98dc939678d8d82abce44ff3f08d5908956afc808a3d67f2c80c345fd4ba2d39747ca5abe2619ebc31f934d16025ced6d3d8e202092502488e6b043484455b14e2b316e3d03fdeff626b22c1debda0caa91fbabb11e6b07e46eac5553399c36bf8390a7e4d4d9d3c323514f88b4dd60f127c9decd4cdf9a2394d488e4ad7e2f6ac8062e0b8670d4668d0c6d5c660bf348f7848944f39932ab6ef8345b5dc1f3fe0593bf2e03921b27a8bf0a110a60bf0dce11fada6baac7e78a04114ae31fb438993dd55f460998864d2d7164b002978299228875374720e279609e90fb8fb83df68893e5739ae0df57fd51c4f2fa28715ddf40cc64e5cb4496a5423ebfbb30569b4a45d74227b220b4f96be66d026b95ec7eee2fda4fd6216271864e1e5f05db4d1c571225a140084e7ba227cce5e0f11401d0e6d246188971c8ec707c17c37b5b7c5bb307aa3ffcd88aca6aaef02421080ea7062237e95328f344405f6c181e42cf006ff1ebdba078099d061986aeda2778c02342accecaf75bd8c601700d11009a2897724bd269d14c41cdc9d2db79fb0f0a7ffa3f3a04b0f86dc583068cdb7998dfc3531a51189fea381107adcd47f98f590dda65a0247ce3dc5dce2746a4ee27d9f898b196d4055a93dc12a25bd05d7e23c9c5b111a8b5f28f825d8403279254897723e8ed50b649698d0d906e786545c7126875c208d715164bc3c00b66eb11e0ea455f7fba07ad08e67c8e6600de7f7c688c18e0874ac8d8b765a082f1b296c8b046be9303578de4cdc0c03a8a73ca93d095b29337316b3f07ed590a3d71c9b516305b328d214063b3722d3be5b9deada3f2d5838d2f0fd8af90fda9b1fa31762483b4e3a79818224d25ffe57ece1ac7a43671086c63cdf6e8a8fd2df6a48236f64d3e6fee5e3461eb22fedd3aaf30babae7a6d4b91a149486138b10f6bb694c0e6dea3550b6dd0649af8fa11ed72559fe2e5b0ebfb4e54d61bd4e6d40e8a1743de7ae38c385cc7c813b3f187e7eccf526d822d52bb89e3f414a320d23e67b79aa4a9a17aeb5135ee59e50ccfaac1ba97d1056945c48ea94c75ef18e640c2463dab4839d7ac7e13620ac72ddd978e5ec4c851d36f9ce28f7fc0630b6ff4ea3dec272249f2db4bc2d88ba0d331c143b1c000767910c73f61ee04d790e210307a0177b7681fb249330320215ca680cc2861a0c0bafc922737f237eb273c7200fa5ffdba4f638768ae645b1fc938620e861406469e656292e66409c2bcb228b252cfd55867956d815e5c3ce99fe42088569194c65b7e1a73ab4de02e66a28b70ae3b2652793ad33d47f338647bc18f5526f7e46473d6e440b2d65a5b79de3ddd7855bda09fb86c951eb66f85c1884c9b8c4b6dab669202f5e828df13850290897647762ba8cb6680a5c091415bc0822e0eb73e9749ec89712d8d1fc1b2c46938bdefc97617f2436710bac752c4987f365223e4054a81a6e943ef447f327cbf152ee74fe2bf14c5451f51a9e6211046d627da47393cd5510343e8b1ccd34d570adb24fe8e4b84745dd831c70bbf17376da2a188d3d8f69104adef3f21d7cb579edbcdb697bb5b7663b69fba1d4c35246ac683208bc2c40f14f325bf634ee462cf998a7ff076d3dd41dfc3710d6b64efd2f05b2aff8bdbac2071dd31cc8c7600bbd9ba9647ee2e9221afe36fb4edc240764bed697f8a4b2ad1c8410312ff9a65a6b86f32329fed586765843559b266bfea58bcbcce2666f44c03a94541652bd0700bf11e54a94b7648149b57cde72ff59b3525c1e3763a6cb0c806f94350c67717eef595e2ec555a5ad5c88519d2a036bed7a0d479621341983e2b8fad27d3229679309dc79282dd6db257a336061a688f689b6a7d347a9da83a33f5cab85f78fe71cb83e9b3272686f29dcdbd9b7e0f11a1ac2a67d310121eaa4d21e0f1ffd97dab4ee9c2ab8474a466b8b76dfe6f59b563a31f8907583d06e27602c68d40206257eea56a7d9d0fd2ed7fc693951028138f9901f8003e123e2fe49b01f07c9469d36712931e3e25df2392fe8d730d43281c7a7b51438155c913e7ce97f15fc23ad548a7b9e212b4d9362360cc4b62a8ebbabfb6d19701803fcc6f47f20cdb1911b92d14236493e753a84092e42585b327019fb77ad2c4bf2195f5c9be7073a0a4d75c773b1e4a77b4a3016b7504df1c9d0ed25a08b8d1960c303023fff8107daf1395417431cfa85f4eadb15036736eaee1e6db04599478c695926b283896a4ded6dfc613489bfb4369cb75508b3b8d86b5af62cdd63d985414115e808104b7cc006a23415a177822d9719fe67871362ba18f533443516eb894aa38eaeabe85879db286de9ecc9d5d578c5c24d6d316473c9f27e13fcfa153bb9e4c9ae0ed1a04378d284d7d759cea70f7ef5a1827e9370b5c3beb8aaf42d2cf63b4d658cbac1ef6d21236acbae40b69ce041acc16ca89bef5d46a7df226a8fff587afb1ad3142763aaf2ca475425f023d7cb256fbad0a6de32c9fff10b4", 0x1000}], 0x9, &(0x7f00000019c0)}}, {{&(0x7f0000001a00)=@ll={0x11, 0x15, r8, 0x1, 0x4, 0x6, @random="5ec5ea5db5a0"}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)="53de903cdce37d4b78c3f7098a103cb6bddbe0230d61564fd37c7943e5e793dee2199208d7fea7cac80ffe65b9328ccf83d2060b64f3cf3028218bb040fdaa71f20d6cea9cc64b69204cab4ba35369fc5abd65577a910b05e613a8e200b36b8a0aa0685456967b8f39c19bcd16244599e3a01e5b69b83a9882a5630ddb7b254b39db8bb3e0324217ff7cc85c40bfe0fb9f2ea43e7530200dd47c89d7", 0x9c}], 0x1, &(0x7f0000001b80)=[{0xb0, 0x109, 0x3ff, "bee3514dff964bc2a4a8e6357502a1b010a8efd5c01f23f4d10bbd3fe23df1d5ea0574e2c82a55d80398a24f2242bea59575ec9d814be69fc68f16067ec2a3d4b965c25f4b363b1ff9d2034acea64fd791ac852af9fdc4f351e9bc45cf5213cae52935c451a52e42fbdbfd53f339913aeadbe000238ccee08044c8f5deb12721ecdce81d0da77cf6aeba3f295bf9947a21414230b07cfffb0449a29b48"}, {0x60, 0x10c, 0xb764f84, "8b1b0ff0d824b336348bf86f3b64296ae92d30128e049978fd07f15d457d8fab48c658db2c3c7d1318518f7315b9b8bccff4a98933b24a54a39bb29a13a11ad61cb1d43e73caf11427520cbe"}, {0x90, 0x3a, 0x9, "3bc0d427115c207492c715321349f1ce50fc6c1168ed58486c8f829d4ba5fd0ab3e1142da6f3c776895f484fca194adb3185b6890ee5425e6295803892ddb481451958356759d02086f3cbbc2c29d040bb0411d470193c974801c6ecca4ce5db0febc5605a10c5632a2da30637be7c15ca134e5a1fb138b63df81511"}, {0x58, 0x117, 0x0, "8a00b0e64ebf8a72d26acadbd8e1b3efc468ee900bdd76945950c3f04dfe7e59ca34ff50e8ade293946fed8c83e731921cca9703de07fa6335f0edf167d89348c580babc"}, {0x98, 0x112, 0x8, "661d7b377510d65641e66e0ae39b23957e79ad88ecf816343a74b0f5c595a91f84b06766403dfd808a171e5b10820f72155200c4419c3f17e7ab2fa74adfc77ab1760b0d564ef3af1707f2959550b28648c201a6270542afb2d885d92d4d0931a6a7a8cb7747cb92758b9a118155b7b224b78f82a255b51cb50fb69e13551a8827525bde"}], 0x290}}, {{&(0x7f0000001e40)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001ec0)="844ee2d0216a0fe0f70ca9828aaddb78aff8b5d1598d1a57cf8eb0504ac2d913407682615a917f738a2278f03432b50016f7db86f30e3695dfe36e22198349c0b5414f67160f045164b3920cc858c093bbc6e20c906fbdd09518f2d54336137ac04758d711ba5e6be4cb95325c093aff5d1733215da5926ea5517783299fba5f9a1f9ac81c48d0b76fcb62b1c6ea9a1b896057d2fcf381502dd6a53d4e52e608f14ad63fbde9f272aece1b80242dae3c3c0df7412153d4ae2a20eb941b0be725c3c740017ed19bd08e7662fc2c2874dfe81dd2c17ec57c4b863f5d679fc2638d148f20dd", 0xe4}, {&(0x7f0000001fc0)="10596098f1cf8bc525b23afcba197011eef0a09738b0fe1b6c94797b2974001bc16e8b860f6fde1151d74bc56b306ab9daf942e8da084136e95ef1571766dac5ad35830ff669a2f8416c11970855264eab9c5a6334f44507261a538f2487b9fb00e1c4be7d0ddee4a4d17aa47a94ba163b10e1c95d1f17b2e044f47d2004a580a6eb6f76162d0b90ea35918be3d8c2a1ac2b6e3d679c26e413e11007f7894c359e4b1be5d1d3ec90085d187965fc1b", 0xaf}, {&(0x7f0000002080)="525ef720b4761e03baf3739c93f65f572839da2d3c444ee184939cbf77a69c1b034107ad7b0dcec0a32b72789763ab046c065a9efea60bbb4141ed896bc9b105c8eb12f2f2be1efe6dcd3a27bf027acc10577bc2af44720029e221a135e0ee28400bc7981a", 0x65}], 0x3, &(0x7f0000002140)=[{0xe0, 0x6, 0x1ff, "464ecdf3dd3b7dd09c055e7120630be89c2c1b837ef26d36a7b2856c6fcd83eb8996ee9c82a9e69a08307ac9eb92c6947df812c99463f2e730cdfd75840ef53df9ec2759d8380da2fe82897c3e538862b8c268f2b34bc6e5a49a0e47b963540afb9062d8f9c5d6ad1efc4f349cbfc0d8071ed161b8f3e67557352ccea35e719a5127fa0bbc97fa06bfe11481ba3dfe551dac454aad808f74006cfc6cf85e274fe14732e4e5c783e35a648c7849fd7c1040b60496395ca4571ee38a68b1359d11e87a6ae6f3c488180a0508fc7c"}, {0x70, 0x10a, 0x4, "355a23397c6779b1fc8c0e477e553fc92da80f2f51714ea5cda9b836bdd7699f0b93a78fbd43c130f44657a79a97a5d35b9c1ee925899cc396b56c129433deb94e6c6d94d5d31d90345d7b1438563f7132b3f338c5c9d76c454f17ab7d"}], 0x150}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000022c0)="89db61dc62515aa2aa4cc64e7d62f81fbe9e0dbcbff4586580", 0x19}, {&(0x7f0000002300)="ad0d", 0x2}], 0x2, &(0x7f0000002380)=[{0x90, 0x84, 0x7fffffff, "309e7e94502f936b9540e5ee532f102bb172cb31d344922862d0488ae3f8c0480dc303d28731d853b7a178414e9ae01fb301bfc3d940384bdd39c17ec0ef2814498b3b7ddd35557e3e02c18b266205cb28630150fbee602b87a12bec96211d3466f9cb0ef9a619d2c4f5fc5b7bedeb4dd44da95124e14dc31b8962"}, {0x28, 0x0, 0x0, "888cdb5e9a6673aa110271c9dc5d240867588a"}, {0x38, 0x10d, 0x9, "16b130c393fe4b6fab0215174ac50a1d6abf4722562be33bc23cc02753d6206824181d725cc0e60f"}, {0x48, 0x10f, 0x1, "2dbf491c44991c8ac217d55fde01d20b3741cae729747dbce8420efece15ec21fdbdc546978a064326595ddb53d349131d3111780d"}, {0x38, 0x118, 0x2, "e223eb041eb27ff52c2f8171fd15aa34e1ed951c660a27a55ae2121f47eaa879dbc178"}], 0x170}}, {{&(0x7f0000002500)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002580)="320bb50db9e49a8336418a607ace649a85eb39b2ea24b335ecbaaf3832a6738ca48908938c9c259ab25818b324ebf0071812e8f10cb6612b0b62e0a2e0c8cfac69da333006e5ca7f80eb03ae7cada58ff6c9f4ad37c1b080b155075cbc97158ed317f5cb47fa3c9874c99c5d57266cfb0b0e4e222870c8439f455bdd94207eea7e5c3456c247529adad672e29c913afacfc2cfbe0f3f657f3197c11143d4c07fee3effe9957a9bf5858b171ebad46382dab4d12a", 0xb4}, {&(0x7f0000002640)="2247620a2d3f7255ba8c3c", 0xb}, {&(0x7f0000002680)="b6a7f2042f084294dba8c7e457185809171ae8b4db8bf8ce0cd7ac3ed19a40f44d6bc8f7f9c85c8248052fd96dc44da198995f8513551b6eb22469a71c34b5", 0x3f}, {&(0x7f00000026c0)="9f3d50ef300e0f3a576c5187e5ac3879ebb2caad1fa060bdb8c99616ea25b656867a7fe311087b", 0x27}], 0x4, &(0x7f0000002740)=[{0x1010, 0x116, 0x5, "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"}], 0x1010}}, {{&(0x7f0000003780)=@ipx={0x4, 0x8c22, 0x3823, "9caca39297a7"}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003800)="fbf8f1b6465ef8c40a73fbbef1ce11520418b0d186d166d5eda54add943561433edf3e3113cab1f92d9ce0db180a342807af42ef29d4ed772d2aaea61bfbc6f488eb4f554e8704ab2c4329b7eb62485d74f1342235db74656ff5bc6e4fdd13e60cf939a21baefb056c0917923883a4da7bc18899142e467f63707fc0d8ac146f4b7063429d1b2a66b51428c4094d1fe95e098a8f2527dd62f382f064b1", 0x9d}, {&(0x7f00000038c0)="64c00ea6de4d72041ab2fb1f3b90b19c4de4f2e3ec7b74e7b895e56e82864e30d104e7faddd68d2beaf54e1f8993ec4f8afd548e2b56c93e176b1b9718f87b3fc584bd51f3d37949ad1e7aedbb3ff94b0ea19b0827cde3ef0922bdf22d6c47c1ef15f93f8bc273213a92be628beeef93831bd3c50b3e13a3abd755e4a89d4479f066177ae880ff328b7590f32f86f5ba723d1cec9e4305f55d3b828abcb216c3f49587ec076b3a9edd3349424fbefd38cda5127eaaaf", 0xb6}, {&(0x7f0000003980)="2257498ac6317d00916b2e64d56d218454236dddb521856bf024eff8ed09a90bf3b54734d1b3f276895ba13d", 0x2c}], 0x3, &(0x7f0000003a00)=[{0x110, 0x119, 0x40, "19fb3d28133b12b438f61a77177421666ac15748579828b795c77edfba367cce13ed603bb8552601c30abeaed38a889afa247c8985cae32b927d75606b7eba64dc27ad603d5a482826a9df1e80fa958ab7d8ef0703496d3cee510333ea982401a6ba68261bc75b9614727a3a94f27b4fe9a51ef29ea3156cf92a4d2c5d8d5d4219113c3e0a9cd47fd0a2029699183d0faa3324bdcf7b6596ddf7d75172863b19e9678500eca97b9e376f03a18f6634ae0814a32d5df189245059a5145fa1381984af1e1682caa22617fe5bf930be5c59dda273c3e028e049179b183596b163f1ffcaaa5ac6cf32b7a33ff95f64aa2237b9a9e63746eccfcd51"}, {0xf0, 0xff, 0x9, "ca7fc491ecbe7683bef0242249801ea6696c3cf2fd1780538e694c975741df27c73d14077894a8ae8ad8f3d8987c0ff3cc44d0e85e8468e53a705c239cc841a4dff9048bbbd8a7ecc0d1cec15780068e6275651f517645933d270b89bab2953be38af4ad1eeea80868f4f93e034f19be83d817e79727c50fc81e86d568cb5e8cd687831298f2485b1f3044883a18a63d263459bc5e13bcf28d93eea7686574713b29ea137e8f59379cd530d72fec62b1331e669637dd30ba12422a6e5c7beb04ad4f1be4b790981b952a59e1c4dcf8d059a9412c2e140692de1403846797"}, {0xb0, 0x111, 0x80, "ae2b4b71fffd35d057c2623d99f96b9c8196c17bbf9f4373c9768b80682cee5029a580f0b0c9bbfec906e0aabcae506402a3ccf8398ad38cc3867cc348fe5420d47afb2cae00ab1c6182e42eb52d197afce2d08586b8ffc0f9181d2f385a5bc3cbfe61036696bacacac83b4b0dabc18dccc7da52bd2fa19d871a574890bdaab14972f37c0add927cb2ac42e56c87c29e70c752f1af5477d8fe18ab"}, {0x1010, 0x103, 0x7, "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"}, {0x28, 0x10d, 0x32b8, "c097bc6dc4829c76bc0d14bc7bd9511223"}], 0x12e8}}, {{&(0x7f0000004d00)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7fffffff}}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004d80)="9995b05b6379f912a65d9008", 0xc}], 0x1, &(0x7f0000004e00)=[{0xf8, 0x100, 0x7f, "a99b188516c69dcc1e29048953820ccb42108dcbe2bb85dcd69660623c68f53ba1c8030a79926f1329f356bdc5b6be5e5525d904f031c75fdac07f7e3cccc61af5026885271b60312d388737759cde4ef460d25e23a55919749dad71e0fcd7a54c611a893ca1eb26ad190b747ae68d4288b2122326b9e6996f73e35380042237b4c07b8f83567de63927466d1797b4ccbfd0b1c57faf1f0b8ea82bfc5650927dc96ff75203d374a612ad1c99dbfc4d5b6118413b12a8e0f714c44c5dca2e52921af87214fb820c07720b5890a5113ef0a7d2d28c66b43edcb8a62ae5d61a81fdcaededbc"}, {0x30, 0x104, 0x4, "6fafa731065a0e7fc3e23b77e0bb9ed3640964bb013462d14d694f9ef89c82"}, {0x100, 0x104, 0x2, "3773efd8e755c809a01b87c2814dc499774928855e20996a233b4aa1bfd8ab22b562e4c40d4323b016fa213a536322d68c2e46165d19f1b28277247d9aec2f71f5e3c9b49b52f6125d064d71c41f9b71557a54ee558246a39aa6d35f6896d47bc6463d7baaba6f521982c3e9f65e22af202d264c2551ce2b92d878da09bc04fd81f4923c959c2b46f99985ab4c82561ef7fef311b50ba64fc0e560cef3232daf38e3c2edb9eeb2dfb768d9b4f5d6a0548677216991b0bb6cacb058ed7ca7ce82a1b04b9caa926066c6916301c794d5f1fb4c8816272ebe71c9730937d24038034d0fedafcbcfa1c09274f08c4a"}, {0xf0, 0x1, 0x1cf9, "780e491e4d26ba62c1a12198eced60e5db3b8cdb9c8a62ee5dc914e5b82b36ed40d5eedda3b61cd25543bf15806ca1f51bae586e5c7e18dcddd7b3a0b3b9b86426b05ca27ecc419944651352d65c1d90a9946189fb901fe752071e5fc2556e93185480a57747ebdab72abe78814563aaddd9fa06e8a5ba9dfb416078cea83e5cc8da2826818ae0aca588f118e8209440fe02251c362bb97bc9b2327b793a5a6be3cef1db6f9394ac65f1b2e34b9b22ffea0b950f545c51ee3667a07bf568697bfcdbaebc39c3fa5a74e995d2f3206d2be770d325b5bbc8f6b8b4"}], 0x318}}], 0x7, 0x4000) gettid() clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000005000006040000000000000000", 0x39}], 0x1) 04:42:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0x6, 0x10000) set_mempolicy(0x0, &(0x7f0000000040)=0x4, 0x3) set_mempolicy(0x3, &(0x7f00000000c0)=0x1000, 0x5) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) clone3(&(0x7f0000000540)={0x280000, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000300)=""/216, 0xd8, &(0x7f0000000400)=""/211, &(0x7f0000000140)=[r0, r1, r2], 0x3}, 0x58) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x7, 0x9) [ 2974.493593][ C1] sd 0:0:1:0: tag#6250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2974.503455][ C1] sd 0:0:1:0: tag#6250 CDB: opcode=0xe5 (vendor) [ 2974.509784][ C1] sd 0:0:1:0: tag#6250 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2974.518872][ C1] sd 0:0:1:0: tag#6250 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2974.527930][ C1] sd 0:0:1:0: tag#6250 CDB[20]: ba 04:42:12 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20003e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x3e, &(0x7f0000000040)={0x32, 0xffff, 0x3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000006000006040000000000000000", 0x39}], 0x1) 04:42:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x602000000000000) 04:42:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tkill(0x0, 0x18) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="f51887402841889e1700daeabf769a45aa5ad29b0e02341f925605e83693539f90160dad442bb44c868c473e47ee59cdc8ceadbc214575cc6ad08205260df8b65bf3a32e8118b5b99d8d287628ced99418734829a2e35042f51587b6eb9777651f506c951209180b420177d2465c8398c134b36a", 0x74}], 0x1, 0xd) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2974.655602][ C1] sd 0:0:1:0: tag#6251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2974.665479][ C1] sd 0:0:1:0: tag#6251 CDB: opcode=0xe5 (vendor) [ 2974.671836][ C1] sd 0:0:1:0: tag#6251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2974.680890][ C1] sd 0:0:1:0: tag#6251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2974.689934][ C1] sd 0:0:1:0: tag#6251 CDB[20]: ba 04:42:12 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000007000006040000000000000000", 0x39}], 0x1) 04:42:12 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1001000000000000) 04:42:12 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x54000000) 04:42:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x200, &(0x7f0000000040)="bbc03d5a3534247ab7d1752605d483634b951a7c8594967c2015a2071770cb077df97b9c365d3b87c6242440463cc645", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="b7dd1aae687c53624ff83d3cc0704603009b7bb98c94d0c97ce1c00d532e38f1f64e25dec52ec2db925841689f9d5d94d9bdf8f2") set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x700000000000000) 04:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000009000006040000000000000000", 0x39}], 0x1) 04:42:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {0x10}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211}, 0x58) 04:42:12 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="3e1454710ca5674feeee57639354f06151a46ae492a660528e23026c2247b618c0b314c72cbe893add7c7d97381b0e2d8e926682771394853e24082c578eab1cdd7833211fa0fe71a7350f0613a1d807dda5eb5e0531aef676488ce306355e306994c429c0bb12a6a0a6173d31450256be3dafe26866cf4c694780779ed0d3724de95464cd609c330b31e4e0317658e09a960503626fb29ccbca568cf4655cd059aef4588363d546ae8e85af6c24d872e91082e8751b99c98d2271d1e45553", 0xbf}, {&(0x7f0000000100)="97d21200145d48ebd133f3ef7ae3207d4c157648a687dd5096b28b76b36dae61d51887c585a258b49cc698f2ffb14b62836cf00f2475f013504367432dd139adb3662a62a77ef82e5a8e40db982aca1599ae68001e71d971b882ff2e3d1e28cb96dcbd1c519ef89dabe910b1bf85", 0x6e}], 0x2, 0x7) [ 2975.357212][ C0] sd 0:0:1:0: tag#6252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2975.367111][ C0] sd 0:0:1:0: tag#6252 CDB: opcode=0xe5 (vendor) [ 2975.374122][ C0] sd 0:0:1:0: tag#6252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2975.383179][ C0] sd 0:0:1:0: tag#6252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2975.392250][ C0] sd 0:0:1:0: tag#6252 CDB[20]: ba 04:42:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000a000006040000000000000000", 0x39}], 0x1) 04:42:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x701000000000000) 04:42:12 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1002000000000000) 04:42:13 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:13 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000040)={0x20, 0x7, 0xfff}, 0x0) gettid() r0 = gettid() r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000200)={{r1}, {@val, @max}}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x1ff, 0x0) tkill(r2, 0x3a) ptrace$cont(0x18, 0x0, 0x7ffffffe, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, &(0x7f00000000c0), 0x4, &(0x7f0000000100)) 04:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000b000006040000000000000000", 0x39}], 0x1) 04:42:13 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x702000000000000) 04:42:13 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x54010000) 04:42:13 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1100000000000000) [ 2976.200559][ C1] sd 0:0:1:0: tag#6253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2976.210434][ C1] sd 0:0:1:0: tag#6253 CDB: opcode=0xe5 (vendor) [ 2976.216758][ C1] sd 0:0:1:0: tag#6253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2976.225808][ C1] sd 0:0:1:0: tag#6253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2976.235025][ C1] sd 0:0:1:0: tag#6253 CDB[20]: ba 04:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000c000006040000000000000000", 0x39}], 0x1) 04:42:13 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1101000000000000) 04:42:13 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r0 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3a) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) clone3(&(0x7f0000001d80)={0x4000000, &(0x7f00000000c0), &(0x7f0000001440), &(0x7f0000001480), {0x19}, &(0x7f0000001540)=""/230, 0xe6, &(0x7f00000019c0)=""/137, &(0x7f0000001d40)=[r0, r0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, {r2}}, 0x58) r3 = eventfd2(0x9, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000016c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000100)={{}, r4, 0xc, @inherit={0x60, &(0x7f0000001900)=ANY=[@ANYBLOB="00422abd98360c4070c1d65fc6e0928adc2e6de6ffe99707774bf5e73157946e8eb92e13c1faa954aad1f8f169ee12ff0bb831130dfbe2397fc3fc0f4ffa7296fff5234560c5baefb40b3ff47f250921de0d7d58d2b4a408bedaf8b62bea67c575afe30000000fbff6c313c5ff9c7acd29e4ebc2a12780e463c98271c31f3539c1"]}, @name="239e5b0607af6c528b30a5df32680b71d1355f38c6f4f79f0957303d708199d308846f308e4d6fa7e0db38010599f2ec32bd2ce873c8d6d50c51c915add9edeb9ba1101ba9e8b26f4ff46a7aca9c042b95ad4d912881506ade3e10f42c49f5ba39ebb191fe4bb84132274923f7459fcb4ab9f19f6dfecf556d4111bbdbb8866f32a69406607c0997914cbdcf71ee9c4cfc6c9893e965d677753ec047a7466f7fdd4a9f42b23d5e926ab528b230ae86a0b20bbc9e444f010e1e1a9c2b61a21b56e15865bef1ab2b2a3064cbfdaf4e61de54a61b20b6229bcc394d0521a0ad9e364b70769e22b6400fc4017a013e03fb4f5f15b91fdf5e4997884feb8e5084b94088b641bc33ad05a9065edfdfd7fb04d18d5a385ebb2538d8d2debe4af2f389bc15e0925ff8a08d07e441c70f5459b591f6d5b4695c6952cc864e3012f970ddf5e75a3a855585ab4b6415cb2d1efe15699d3528f381703c5880c6c82503bfb82b2fe3610415844fbf05f1d5d70f854b78f0f6b0bbb973259bb415f6bf842beb9af3dd43f8f688bd1f007fbdf6f43824d6e6dfa2b76d6eeb0f088eaccf3dc29d07de2e64cd884b27995ceb5b1df49c4b160e5dcb5603f073bb42bdcbb59104ecb596ec87355e4481fac6c2006984c40d0d8faccfe75a481ffa686bd6f96f07080eac62c1423ee52506b6181aa9e996cabceb921776b93201914ae56eb3003dbd7625f7f79759ae1b2f0e71a0599302f83544dcc4b2011e7662d55a2778de799ef61a2f754bcf6c998b0de65e1e67c8d6b9c4c74ae6207d22a4cc5e646281879335c1eacede0f3abdf665adadc7b4ea1842dfe8741d758b0dac9e4b04691dada43907f93b30a3eec3c78926a6fa8d0f318a608f1b28f90c245917352e4558a95854fc60263f08291a0677ec16fc5876171e5720c6b7c1cc5dc971ca956bd0e223bf78f6fa4ca020de3a037209766b41ee33b52bbf8c4ed8b606d76cdf8766e9578501bfeecaa1bc32a5e38ce0c3fb31cf366f888cf5332d99ef3cd87edc210b3340b324b3306363dfb147263a47e80c53057a44f6aba7155d9a447660c2f05916a7078bd4c9b318c56b4673989f6187de7082e2953be65bbc3a4aab9d02fbaf58d98eaa9bb55d2c48a6c7a158d7c64058f29d36502b6d6a38d3d91207fecb05fe21293a666d9c618ce6a64660a3667dd7f34a7a0aad3c59d14546503cfe4c6e2ba1f920a4a8cb7a34140b7e2bdb64217e31934057f756dbc695a5477098ed17cb476bf2ef14c88614089bde44839f0e3a4f2ab0ca82a85bf5a154a7ff106d366cfe7892a51b3c6c17c1de3cf7b469e54bc1f5a1e97cbcdc785f00cc980d36246d1d171730d5119e98bbf7ac44ef0db262477bb17aa83dc757e6bbda4b65eee7cbc313b281827df04d9a6ff9cf721446e2191f55dc219e4e73e73ff3f5780a86133234de127ef6cfafb986a093545f3b6f2405d3e1d8ba27d40828122929a34e3c745c0917f37f685683fd4b1421c609bce8865e91f5fd7d26b0129d9bc7decf4e04555f798f119371eeebf4bbf19496c2eab441b0209f9ef2d7cc15f961e024f4fdeb4212645c5789e0b7e7aad00044a36f7ebdd3a5c641dd0a6e32f6095403179961088c2664ef67d37c0365d860c3d0900eb6d90f91eb2be067ff41c60a3244fb3af88ed9bd65515a4f016fb4fa86794be7edb01ba74a18b60de3a614620d1f53ba31d18d6a7fa30185a6c6251c68aecdac333f2ae135f7aff025f29d9865075ea8a1f183d158cdcfd3d2d7a4db060522e4d969424edababe6405659f5438055a0f1aa17c417d89775a496a61baf8bac95ef46b6057add586266528fa3eb6c071e3f39d8394edcdb79409d5255a7385abfde8ff4b211957925c7b27362df9496f0c398ef559dd2e6dd64de483d332d4c8494b0a21a46e2eb5654bb6ab4aaa3dca75890b6438650a394b64b45be8be9476df807df8bf1991d38c54e9a67f581e3219197230d20fe8a4abc709bd49adf5b5d0b134fa919cc340e6840231dd5fe5faca752375701ed2d227c7a2a744e2268f7545a6ca328fab98ab8cffbb222527726c8c967b95dc5e233438be0b36e03fb2931128276831154848f63fb33de8af1ac09b4707b0f53e928d34a891abd2b5310f722499dfc7fa2176d3e344db48057eb58af5a6ae669c99fb5cb9ce84a0f9fbfbf9965e58b9dc8a43f356a0852716d1e08fc97cfeef68cc336a5535ada0fe3b235e9cda4aecd48991df6ec40c2536995e7e6a7c3b6eb3c78c2bed3b7c0f1368c5e95b2d44ccc56e61ccc5ef09e76509a75bca00f05328b455f9a015e7bacf429d5761c58c0c6d324b748e58aa2433f180f674fd61169c8e1fa076b0af3c41a591ab0f70aef9bffa41468fe88c98b14a144940468d028bae34a27597c7a049993b7b95c21463f59ee7212983cc38df11d188a90222bb6f637f565c0000c695a6303f325dbd72e6cd562a42130e4e7aa0bb20388c17cf05924baecea0770d78bed099abd9f3dcd6a591cffbb3c4f0cef0299d4be1fe30214923e687ddca5494ec6c65a59df1c71caa7ca1701bdca3f3b32ccd8600defcbb62310918730934f4c30420b9aab1f69f58f22607ed9bb4ffa6dd14e16e3318bba85b68844acb12481b73c7c0b857f62c18ccf1ca4274826a238366659caacd431fb7cb2e7fe8c4b1c3fd12bc22aec6da4f1a7ef4decca72bb2363adbf5b359c4013c2199e9cb2fd031d97f419616b9a8f80946d7a3aaf9ac4ede20a0684ddc66964726c9631b6160fa961e6ae4b5bcb8f1faeb4ec042056abe2246dfce271e9c40039c7c114161aebe924f80691bb38ffcb768fcdc591ff8afbfa270046ca517919560e78cc003034a51f01ac929da10eb164edfacff5c074333f30f1cf7c5aefd6d34763f96eb804435cf687e70aac9cdd623a2a903f2c6017902e13b794feb50e23aaca6fc1c5687c555f5ef32f344045870bc565cb84fb55f4c2869a0ef882c8d9bb7b3c050e50e1801adc0352d3a327b3eac5f93d090fea5686e6f1ef38f277485bf4fe26d7e661d19c5be56875786130e6cb4a6fe969152c68ebb1116930dba70b3a17fcae34e10d31526e287e255e0abe6a60f02c82eaf43fb7d04ca803424f78254b3bd627137394de435124bc8630c16d34b816a0856601f5a38dd710eea9b01357b11470716830c6bdb9450e8b591f4273575522fb5064ce27fb841ae9c2e19ab199ac48a5acf121ffd2b9f58d724497424714e17939236a8ccb589458e8ce5a64c48f543bec8b6237fed63961e96b7437776fc52ccdfd18a39e00d48233324a26f9998f641ab5f9eae5f1d417b254dbaf477bc12a7fde10dbf378590b227113463d5761f4e0a261b4676951afb884f7ca48f400fac64e3acf157775e18021c77b327bdfd644a065f363b9d0bc9e4a19cf3d620aa33a41aa3ba12e989902b8275e89bc29bb20b713fb1b16f8633c25d4e567e71c163f241483e9d2f3ebe65f5b2b9581d3bf670fc527331e24c25ee39f6d71de0e5d89dd6f8b179320393918cfe98fc44681a1282cd21122d8c8cde79cddda7c37e42f179bfc59f968d0a4f7bc05605a62baef69d629b28b14bf574d2c3a5c5e8a3aafa3860fc64c2e77fa18765d6856ce436fd77eb6485a68430dc4d27abb60718899e97de411c2e67329ba7f9a426348fa14d49ed3dc9dcc5b120107dc168485899b1afcb43c5f1b2a263b10dbef8c10e03c1c70be7cf239cde92d311906b18aa125e261ee0f474034f72c8e56724d376de14e25357bb244e81baab1f697a2936ff45857faf218b8046758b9eb84a5ee6ff29934c96ff1641fa4c82de2e385021e7da75112f3addfc21eb761e9f3b8c89c210b3767678d0aa7d6bc489824a56c2a464df1b46035956d2e53e1c635584fdfe9d5c2c7f09ff4512ff4533fd2e8e972ea8ce94e3b420e7fc4080f998c1f5d45157175b46a7f47638f1f58ac21f34566fa973a22d1b5cd54277c88580073720ddf7df6d72472c25f39575d2e6408dc2455558afc9d693911f3112c838f3be1d9b950a72739205e3f927c2dd6ff755ea95ed2fc9a57f7779f3cacc291886f2a227acd1adf7e31ec8d6ebd7d57f0d1054a1396a94c17114b128c438205986aed773c981a60c448a929a07b6405b6476a055b09f1b3464034881a65d1bb801706ae15ee334dfcc6306a594308015755c05e3e13653841c8fc9680b80e6b3a5579f2c0ef5bc88c554d98571681aaee04a38eea5bda5cdeed7e8ac99e277b13f47ba0daac41656e40f233b738131f38400b7a21940163f69928f7194742ecebfc940a29fe87f45533a54aa5a8ed677098259c792a056f976e6b3dc2ea3afe2e05a2ac66cfce7d30f6781c47b6e9fa361ec0fbdb3f090e6a44bbfb680940dcf2aa8a7d5c8237ac2f6621f7098ffef6ffc71000f1555cf110920103274e819e3162304e03350caf156cb6cedc68d71ee00299c9d5f0ccd12b9ca9d6a5e50ad5bebf146521825ce1967f5458e75ebe4d7619e38760aa7c3c33aabbd2e41015b6790f318ed9e9ddde4112ab56891231f8301590a1b912a27f9d07f056957a2ef78d68460c7abed1d22a7b86e5b3c1c1151cc4f6afe522cd6b0fdc8a44c4e56cf3f8156294dd0f91460f23c58a358b94bf1da7646ff932a7337e2655598c6123a7b516affe03566d71655ab8cdcf372a2661fe1b11a18b118b9234f5c4020792e12049244697b0817cfc920631ea0b826f938a3ff8fa68843ea2d653a660298d1f5275febad19e0709ae6ea5dbffcb3913b5dc1d750a35c072ee2de5f5ff09297b165d0c35827719b770680580228feab38176c92ad54d57de64d2b0de4b64b0e78262006947ccd7f153edfbe33df3136eee8ae379cabc7efa5acf91477a03e24d8957f3ace807d1a56c81da4e4f01f7052bd7a89051d67425d5c8a1e7f34ba3ba576a481b7ed3f210b179956f1412d21fc882b259a313fae8f3759e132945c769700a3c23380f9391a3b8f62ab038eb234b622acd9ecec2e79643bbdff0073724c624458a5e3c709409be90beac94627afd8564ee11788eaf4a61e13985dd92648bdbf0dbf10d43add0efdd5cda83b270f5d3d81ea2620d605a6b2cdfc0018696640f3b0aa53bcdf27f950a0ade8348b56f5df0104ee301fd92d765bf2332a8151049d64773923a25a693688b9eec709a033be9855f87d6b115db95c87a5d7e08b934233ffaa3ba98c4ecfef895256ef6f6435deb9850db32460fe963ec7ed0061979084ffbf2589e607cc69ad7690ae204a968f4f234f8e2376d95018cc09038675c15bbc56e7589828c978e40da5a93cce1241e0c4ba51dbd5b503b441ee880deece7e3dbf005816847ce8571e7933d8363919cddb43bc73c6f8bea4ac5ef54327ce104a76cad13fa319a44f221ff773a66d60e9d00bc1d9bfa053628cb9bffe34381ef9cf34ab92ad147a50b56f2bf29728bd60ece68537a6b34a2324787aa966868b51e43a81c941ff5526b64b0a43dc87f244d4c7f4c18c4fe967c022b0ddc1f5c0376bc6477484ba524e64d690a132b6b87d2951ddc5aac576a8321dd90e337828135e0f4d3532c1d8fc3fccd1192e92d1d987ed26d7f28836f222244b16cf4fe3f89af5a89a0ebebd92f158285e236ee1275cc7546cc4662c593f0d4114f10deeb6c1bfc795a4cfdb791778421bf3086faf92d3cea6c335ad"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000005880)={{}, r4, 0x0, @inherit={0x50, &(0x7f00000014c0)=ANY=[@ANYBLOB="000000000000000001000000000000003408000000000000fffffffffeffffff0d000000000000000500000000000000ff0100000000000001000000000000000100000000000044af3e6f000700000000000000"]}, @subvolid=0xcd}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, r4, 0x4, @unused=[0x1f, 0x6, 0x3, 0x800], @subvolid=0x5}) pidfd_open(r0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) 04:42:13 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x54020000) 04:42:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000d000006040000000000000000", 0x39}], 0x1) 04:42:13 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x800000000000000) 04:42:14 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x20000, &(0x7f0000000140)="d9fc3e97351052bb8601462aaa4511c9623f54324007197ab84e9a4c3966509b55f05199cd4b33f9aa3a8f4f631e823c50d263e2158a782987f47138b13f2fa0ef4c668261f29930a700ce5b0a480da63328e62abf83b74557bdf2512f838dd1884b685cea9dca70c34f7752fa7b5a3ffc3f464fe15c03f19097cc325c49d13a2b8ca17145f4366845d6353f436b9d02ba7f756aebe2041f4693e13f726708f92deb0c606b50ed95880687", &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="4490cf555a1c6d9f6fbaeb1c490b66bc06fd6a50dc3ba93785e37bfe1f5f1366e4c9a6ed123098") gettid() set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) fsopen(&(0x7f00000002c0)='nfs\x00', 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000040)=""/220}, 0x58) 04:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000e000006040000000000000000", 0x39}], 0x1) 04:42:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x55000000) 04:42:14 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1102000000000000) 04:42:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x801000000000000) 04:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000011000006040000000000000000", 0x39}], 0x1) 04:42:14 executing program 5: set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) 04:42:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x802000000000000) 04:42:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000012000006040000000000000000", 0x39}], 0x1) 04:42:14 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone(0x13384000, &(0x7f0000000440)="c318baf611462996ffff000039aeba010d2bc775b4145632965a9a0f3829a637d63a442931614ecacafec44642275eae09f4121b30244177e480f73059324de5ca175a50046582b74d3be02b53c34f10a1854c4409dab64e62afdc4bdb1b4fa92966d2db57ff0100002cc826c8f9c6d0d0dcc183b424353e0709313de16663156f82c347bf5eacaeeb99bdde5dcfffb61cb833e3927eae94", &(0x7f0000000200), &(0x7f0000000340), &(0x7f00000005c0)="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") r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3a) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) set_mempolicy(0x2, &(0x7f0000000400), 0x7fff) ptrace$cont(0x18, r1, 0x0, 0x0) rt_sigqueueinfo(r1, 0x40, &(0x7f0000000380)={0x33, 0xfffffffd, 0x8000}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x4, 0x42) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x2000000000000000) clone3(&(0x7f0000000540)={0x40800000, 0x0, 0x0, 0x0, {0x24}, &(0x7f0000000040)=""/219, 0xdb, &(0x7f0000000240)=""/208}, 0x58) 04:42:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x55010000) 04:42:15 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:15 executing program 5: set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x9, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x100000000, 0x401) clone3(&(0x7f0000000540)={0x100000000, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/222, 0xde, &(0x7f0000000400)=""/211}, 0x58) 04:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000016000006040000000000000000", 0x39}], 0x1) 04:42:15 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1200000000000000) 04:42:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x900000000000000) 04:42:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x55020000) 04:42:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) [ 2977.981200][T30266] validate_nla: 64 callbacks suppressed [ 2977.981217][T30266] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2977.999886][T30266] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2978.018660][T30266] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:15 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/209, 0xd1, &(0x7f0000000400)=""/211}, 0x58) 04:42:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000017000006040000000000000000", 0x39}], 0x1) [ 2978.037152][T30277] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:15 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x51000000) 04:42:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x901000000000000) [ 2978.126368][T30287] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2978.159205][T30287] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:15 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x56000000) [ 2978.206173][T30287] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2978.267897][T30304] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2978.317877][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 2978.317908][ C1] sd 0:0:1:0: tag#6258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.334377][ C1] sd 0:0:1:0: tag#6258 CDB: opcode=0xe5 (vendor) [ 2978.340726][ C1] sd 0:0:1:0: tag#6258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.349773][ C1] sd 0:0:1:0: tag#6258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.358881][ C1] sd 0:0:1:0: tag#6258 CDB[20]: ba [ 2978.391742][ C1] sd 0:0:1:0: tag#6259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.401584][ C1] sd 0:0:1:0: tag#6259 CDB: opcode=0xe5 (vendor) [ 2978.407914][ C1] sd 0:0:1:0: tag#6259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.416964][ C1] sd 0:0:1:0: tag#6259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.426107][ C1] sd 0:0:1:0: tag#6259 CDB[20]: ba 04:42:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000018000006040000000000000000", 0x39}], 0x1) 04:42:16 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1201000000000000) 04:42:16 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x56010000) 04:42:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) getpeername(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r4, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r5}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r6, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r7}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250600000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000140002007767310000000000f8ffffff0000000008000300020000001400020076657468305f766972745f7769666900180001801400020067656e65766547000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x81c0}, 0x8004) r8 = fork() r9 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x80480) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000800), 0x4) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000840), &(0x7f00000005c0), &(0x7f0000000600), {0x11}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000000640)=""/181, &(0x7f0000000700)=[r1, r1, r1, r8], 0x4, {r9}}, 0x58) 04:42:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x902000000000000) [ 2978.870273][T30342] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2978.900938][ C1] sd 0:0:1:0: tag#6260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2978.910829][ C1] sd 0:0:1:0: tag#6260 CDB: opcode=0xe5 (vendor) 04:42:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) getpeername(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r4, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r5}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r6, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r7}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250600000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000140002007767310000000000f8ffffff0000000008000300020000001400020076657468305f766972745f7769666900180001801400020067656e65766547000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x81c0}, 0x8004) r8 = fork() r9 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x80480) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000800), 0x4) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000840), &(0x7f00000005c0), &(0x7f0000000600), {0x11}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000000640)=""/181, &(0x7f0000000700)=[r1, r1, r1, r8], 0x4, {r9}}, 0x58) [ 2978.917166][ C1] sd 0:0:1:0: tag#6260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2978.926236][ C1] sd 0:0:1:0: tag#6260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2978.935274][ C1] sd 0:0:1:0: tag#6260 CDB[20]: ba [ 2978.949268][T30348] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000019000006040000000000000000", 0x39}], 0x1) 04:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000001f000006040000000000000000", 0x39}], 0x1) 04:42:16 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x56020000) 04:42:16 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) getpeername(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r4, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r5}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r6, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r7}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250600000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000140002007767310000000000f8ffffff0000000008000300020000001400020076657468305f766972745f7769666900180001801400020067656e65766547000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x81c0}, 0x8004) r8 = fork() r9 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x80480) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000800), 0x4) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000840), &(0x7f00000005c0), &(0x7f0000000600), {0x11}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000000640)=""/181, &(0x7f0000000700)=[r1, r1, r1, r8], 0x4, {r9}}, 0x58) 04:42:16 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1202000000000000) 04:42:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000020000006040000000000000000", 0x39}], 0x1) [ 2979.205326][ C1] sd 0:0:1:0: tag#6223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.215201][ C1] sd 0:0:1:0: tag#6223 CDB: opcode=0xe5 (vendor) [ 2979.221544][ C1] sd 0:0:1:0: tag#6223 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.230592][ C1] sd 0:0:1:0: tag#6223 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.239646][ C1] sd 0:0:1:0: tag#6223 CDB[20]: ba [ 2979.347642][ C1] sd 0:0:1:0: tag#6224 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.357517][ C1] sd 0:0:1:0: tag#6224 CDB: opcode=0xe5 (vendor) [ 2979.363910][ C1] sd 0:0:1:0: tag#6224 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.372968][ C1] sd 0:0:1:0: tag#6224 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.382014][ C1] sd 0:0:1:0: tag#6224 CDB[20]: ba 04:42:17 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x106) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) getpeername(r0, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) set_mempolicy(0x0, &(0x7f0000000000)=0x10000000000054bd, 0x0) r1 = clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/211, &(0x7f0000000000), 0x2}, 0x4f) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r4, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r5}, 0x80) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001180)={'sit0\x00', 0x0}) sendto(r6, &(0x7f0000001040)="8cd58035", 0x4, 0x0, &(0x7f00000011c0)=@can={0x1d, r7}, 0x80) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250600000048000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="1400020069705f767469300000000000000000000800030002000000080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000000000000140002007767310000000000f8ffffff0000000008000300020000001400020076657468305f766972745f7769666900180001801400020067656e65766547000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x81c0}, 0x8004) r8 = fork() r9 = syz_open_dev$vcsn(&(0x7f0000000740), 0x6, 0x80480) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000800), 0x4) clone3(&(0x7f0000000780)={0x0, &(0x7f0000000840), &(0x7f00000005c0), &(0x7f0000000600), {0x11}, &(0x7f0000001240)=""/4096, 0x1000, &(0x7f0000000640)=""/181, &(0x7f0000000700)=[r1, r1, r1, r8], 0x4, {r9}}, 0x58) 04:42:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xa00000000000000) 04:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000003f000006040000000000000000", 0x39}], 0x1) 04:42:17 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1300000000000000) 04:42:17 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x57000000) 04:42:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200fdffffff0006040000000000000000", 0x39}], 0x1) [ 2979.759039][ C1] sd 0:0:1:0: tag#6225 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.768915][ C1] sd 0:0:1:0: tag#6225 CDB: opcode=0xe5 (vendor) [ 2979.775279][ C1] sd 0:0:1:0: tag#6225 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.784352][ C1] sd 0:0:1:0: tag#6225 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2979.793437][ C1] sd 0:0:1:0: tag#6225 CDB[20]: ba 04:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000004e000006040000000000000000", 0x39}], 0x1) 04:42:17 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x701000000000000) 04:42:17 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xa01000000000000) 04:42:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000050000006040000000000000000", 0x39}], 0x1) 04:42:17 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x57010000) [ 2979.968634][ C0] sd 0:0:1:0: tag#6226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2979.978505][ C0] sd 0:0:1:0: tag#6226 CDB: opcode=0xe5 (vendor) [ 2979.985055][ C0] sd 0:0:1:0: tag#6226 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2979.994105][ C0] sd 0:0:1:0: tag#6226 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.003152][ C0] sd 0:0:1:0: tag#6226 CDB[20]: ba 04:42:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xa02000000000000) 04:42:18 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000052000006040000000000000000", 0x39}], 0x1) 04:42:18 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1301000000000000) 04:42:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000190006040000000000000000", 0x39}], 0x1) 04:42:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x57020000) 04:42:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000000c0)="246314a680da832c068a2666bc20c3999176433b08cb49b19190f6db190b45bfa9bf9fdccc9c2953d12ddb0abcca814b263a97c52ac16ba326ce4860902661f2c0478e3148785e8d739112576e1e1b345d12cd8df831f757eb5679611282c13c00f6ae1387", 0x65}, {&(0x7f0000000300)="b64734c61b4a38d37cd96ab6e92ffb1d1ce0e7779754d4742f88d04af68bfe0b43a03748b9cf1c7cbc8fcca5a709819263bfd65cd11ae7ae7428ea28da2ad9829d8de4fc310c0c7c338730f4ef655619496b01f5d600ec679bd3dcbe359cc8efecaaa9eac749a45770d8fe6ea130d21195c4d66b09e4f50eca72c32bbef2f479146429847c45641ef97ca12c0f9bf60dbbba9c5c10a659c235fb701f47f2e5b71967", 0xa2}, {&(0x7f00000001c0)="300c4b411481e3", 0x7}, {&(0x7f00000003c0)="a25f13e43f9de331501a4fa25414c3", 0xf}, {&(0x7f0000000400)="6543033fc565de291575c100eb64b89c5f2dcf77f0f8a1d7ac7f7c8df9df76a7c02dc59cfe6abf64e9e22dbad71bcd6aba379ef78b0e1da99afb067494c87cc2f178", 0x42}], 0x5, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4000000}, 0x80) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000054000006040000000000000000", 0x39}], 0x1) [ 2980.635662][ C0] sd 0:0:1:0: tag#6227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2980.645526][ C0] sd 0:0:1:0: tag#6227 CDB: opcode=0xe5 (vendor) [ 2980.651881][ C0] sd 0:0:1:0: tag#6227 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2980.661016][ C0] sd 0:0:1:0: tag#6227 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2980.670182][ C0] sd 0:0:1:0: tag#6227 CDB[20]: ba 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000058000006040000000000000000", 0x39}], 0x1) 04:42:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xb00000000000000) 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000005e000006040000000000000000", 0x39}], 0x1) [ 2981.057948][ C0] sd 0:0:1:0: tag#6228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2981.067831][ C0] sd 0:0:1:0: tag#6228 CDB: opcode=0xe5 (vendor) [ 2981.074200][ C0] sd 0:0:1:0: tag#6228 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2981.083250][ C0] sd 0:0:1:0: tag#6228 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2981.092388][ C0] sd 0:0:1:0: tag#6228 CDB[20]: ba 04:42:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x58000000) 04:42:18 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1302000000000000) [ 2981.196490][ C0] sd 0:0:1:0: tag#6229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2981.206443][ C0] sd 0:0:1:0: tag#6229 CDB: opcode=0xe5 (vendor) [ 2981.212813][ C0] sd 0:0:1:0: tag#6229 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2981.222038][ C0] sd 0:0:1:0: tag#6229 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2981.231108][ C0] sd 0:0:1:0: tag#6229 CDB[20]: ba 04:42:18 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000060000006040000000000000000", 0x39}], 0x1) 04:42:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xb01000000000000) 04:42:18 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1400000000000000) 04:42:18 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x58010000) 04:42:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000054000006040000000000000000", 0x39}], 0x1) 04:42:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000062000006040000000000000000", 0x39}], 0x1) 04:42:19 executing program 5: clone(0x20100, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x4, 0x0) 04:42:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x74}, {0x84}, {0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90080, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 04:42:19 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7c}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="ff770100000000000000eb4c9989c262ed33bc4879465cd41e21411354a8d0e0cec66459acf2f94e07ea972c0e74d0dc37f948f5c54dc92f4a153f38672a3758c1f2e26b2fd8991a530b0c3191027e14f30a2f1caf7836b8f754607b27fa5b4a36ca32e915dba6fdac5b4b7be075c0b27a70caa26cbf4756d4b18d8f73c384c53852e4c0af68f2ebc3a9dfafb1eaa91f7018ebc60c6c3b2bff29448957e802"], 0xe8}}, 0x40000) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x16349180, &(0x7f00000003c0)="66aeee45ff74eb40b7159a579f9a19a317768774a37bffa483793f166b7b7f17d0530bf0445d3ccc85a713414bfb2e00673f3081917486a1a1cd491c7d2b1f37d40de0aabb17b7912d5627d2847e528d2859db2a4bd37d1df3ce44b929320e1fc45a8dc906db92bb1c639e06b17f2737e720c6f217cc29d9315f1ad02b2f79ddef57870156f4c5e295dd205470fa6f0acfe40ce7775102076dd10f59be4b90eec7a1f57a96524040", &(0x7f0000000080), &(0x7f0000000280), &(0x7f0000000480)="40ad8dbef33ea2b913315b6de25ab8d421e55b59d6b611736f9a689d098e31d504cee43c9948d102f685bf024fe1f26410373e0c5907b80bf7091fcff71217fba4a2a45bc02f17e164353cd0bed7f00b3f") vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102385, 0x18ff1}, {&(0x7f0000000200)=""/81, 0x51}], 0x4, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x80000001, 0x83e, 0x0, 0x6, 0x12, "f0fad35a4cd2ab699c708ebcc3024ddc3f9515"}) getpgid(r0) rt_sigqueueinfo(r1, 0xa, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0xa, &(0x7f0000000500)=[{0xd51e, 0x3, 0x7, 0xffff}, {0xfffb, 0xd5, 0x8, 0x4}, {0x7, 0x80, 0x0, 0x7fff}, {0xffff, 0x0, 0xec, 0x9}, {0x9, 0x80, 0x4, 0x2}, {0x7f, 0x3, 0x1, 0x5f8d}, {0xf11, 0x1, 0x81, 0x7}, {0x3ff, 0x80, 0x5, 0x9}, {0x0, 0x8, 0x3, 0x8000}, {0x9, 0x3, 0x8, 0x4}]}) 04:42:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xb02000000000000) 04:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000fc000006040000000000000000", 0x39}], 0x1) 04:42:19 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:19 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1401000000000000) 04:42:19 executing program 5: set_mempolicy(0x1, 0x0, 0x0) unshare(0x48040480) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) set_mempolicy(0x4000, &(0x7f0000000040)=0x4, 0x0) 04:42:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x58020000) 04:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000fd000006040000000000000000", 0x39}], 0x1) 04:42:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xc00000000000000) 04:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000ff000006040000000000000000", 0x39}], 0x1) 04:42:19 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x20000, 0x1000f4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0x7) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) readahead(r5, 0x1, 0x2) fdatasync(r0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100000, r3, 0x9}) 04:42:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000400ad0006040000000000000000", 0x39}], 0x1) 04:42:19 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1014423, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xa104a2, &(0x7f0000000000)={[{@max_batch_time}]}) 04:42:19 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xc01000000000000) 04:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000106040000000000000000", 0x39}], 0x1) 04:42:20 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x59000000) 04:42:20 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x10a) write(r1, &(0x7f0000000000)="0e2aa433d276f8bb5813adda2aaf243717c9501a6fa98c7cdb30581a462429be498dec1deb819ca7149e75532e2efb456e5a4bf962104c9efcdcb3b977c0debe9aa71337e21210f5d9ae15333e365198e5c592e20b533f6d64db5786385702bf0c04fe83bd23ad43013a8db6c28d171656b824c82dfc1880c1879eb4f2ddbac5f2e75c37b0b16e61a787775658890139c50d9eed0c47af3935dc28f9c1587b5e9620a003ef21513dc65946afdaf137f0a8c065fbcfbf2f0c1c5af89a5e", 0xbd) write(r0, &(0x7f0000000140)="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", 0xfc) read(r0, &(0x7f0000000340)=""/166, 0xa6) symlinkat(&(0x7f0000000100)='./file0/file0\x00', r1, &(0x7f0000000300)='./file0\x00') 04:42:20 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1402000000000000) 04:42:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xc02000000000000) 04:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000206040000000000000000", 0x39}], 0x1) [ 2983.204315][T30731] validate_nla: 74 callbacks suppressed [ 2983.204335][T30731] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.235480][T30730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2983.242825][T30730] IPv6: NLM_F_CREATE should be set when creating new route [ 2983.250046][T30730] IPv6: NLM_F_CREATE should be set when creating new route [ 2983.274167][T30738] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.313899][T30740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2983.322979][T30731] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.343068][T30738] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:20 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005bac0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}], 0x0, "27cfc4dd7ec58c"}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x3, 0x106) bind(r7, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000000)={0x4, 0x2, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005bac0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "27cfc4dd7ec58c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050840)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3, "527320990e82b9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051840)={0xfffffffffffff553, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x4, "a6d4d673241614"}) quotactl(0x44000080000101, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) 04:42:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000306040000000000000000", 0x39}], 0x1) 04:42:20 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x59010000) 04:42:20 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1500000000000000) 04:42:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/525], 0x30) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x63, 0x81, @scatter={0x3, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000240)=""/213, 0xd5}]}, &(0x7f00000005c0)="b108498338799c9f47d0f8981b21262c1709e1a199d7f713f3cd0ea9ab43cd77fa77a262b07d868a4dccd71e3347475692cc5548b95b63145beb80057ae5ffcc82cf8032a01857e79ed25c42bc86ce3f9fe947cd678bd134c9f12bf7c41366aa24b6c5", &(0x7f00000001c0)=""/31, 0x3, 0x10011, 0x1, &(0x7f0000000340)}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) r3 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)) clone(0x40808000, 0x0, 0x0, 0x0, 0x0) r4 = gettid() tkill(r4, 0x1e) 04:42:20 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xd00000000000000) [ 2983.484096][T30761] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.495282][T30761] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.515101][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 2983.515131][ C1] sd 0:0:1:0: tag#6212 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2983.531635][ C1] sd 0:0:1:0: tag#6212 CDB: opcode=0xe5 (vendor) [ 2983.538071][ C1] sd 0:0:1:0: tag#6212 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2983.547151][ C1] sd 0:0:1:0: tag#6212 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2983.556233][ C1] sd 0:0:1:0: tag#6212 CDB[20]: ba [ 2983.597193][T30761] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2983.639244][T30776] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:21 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000406040000000000000000", 0x39}], 0x1) 04:42:21 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1501000000000000) 04:42:21 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xd01000000000000) 04:42:21 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x59020000) 04:42:21 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x4) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) ftruncate(r0, 0x1) socketpair(0x25, 0x5, 0x10000, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r3, 0x2, 0xd6dd, 0xc0000, 0x8}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x6f52) fallocate(r0, 0x1, 0x1008, 0x28120001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x482080, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) mmap(&(0x7f00007d8000/0x4000)=nil, 0x4000, 0x100000c, 0x30, r5, 0x49a41000) sendfile(r4, r0, &(0x7f00000000c0)=0x3, 0x9) [ 2984.061896][T30800] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2984.081770][T30800] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2984.092397][ C0] sd 0:0:1:0: tag#6213 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2984.102266][ C0] sd 0:0:1:0: tag#6213 CDB: opcode=0xe5 (vendor) 04:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad0002000000ad000406040000000000000000", 0x39}], 0x1) [ 2984.108599][ C0] sd 0:0:1:0: tag#6213 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2984.117829][ C0] sd 0:0:1:0: tag#6213 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2984.126965][ C0] sd 0:0:1:0: tag#6213 CDB[20]: ba 04:42:21 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3400f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x400, 0x923) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') write$binfmt_script(r0, 0x0, 0x0) 04:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000506040000000000000000", 0x39}], 0x1) 04:42:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='minix\x00', 0x10000, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4f, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="f30691c02ab901a2eeed01278191c0b2b06c441dc52c721c6f847182d6d3ba08e75686c704defd5ad62cb1f569958b1727dd6f29b5df3359395670fac5161fdd443cfcd2f5076872d2d7bb076e738418def400985b29a92a039363bb7256422bb465a2010e955241d59e755cc4db3906a922eb5f691aa6ffbb23a386f9", 0x7d}], 0x90410, &(0x7f0000000240)=ANY=[@ANYBLOB="636865636b3d6e6f0100616c2c636f6465706167653d3933362c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c00"]) mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x18a0020, &(0x7f0000000380)=':+(-#>\x00') 04:42:21 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a000000) 04:42:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000606040000000000000000", 0x39}], 0x1) [ 2984.384710][ C0] sd 0:0:1:0: tag#6227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2984.394755][ C0] sd 0:0:1:0: tag#6227 CDB: opcode=0xe5 (vendor) [ 2984.401113][ C0] sd 0:0:1:0: tag#6227 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2984.410170][ C0] sd 0:0:1:0: tag#6227 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2984.419193][ C0] sd 0:0:1:0: tag#6227 CDB[20]: ba 04:42:22 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:22 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30783030ae876765f67abe0010a02bd6303030303030b0303030163030302c636f6e740178"]) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x2b, @multicast1, 0x4e20, 0x4, 'lblc\x00', 0x1, 0x400, 0x1f}, 0x2c) 04:42:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xd02000000000000) 04:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000706040000000000000000", 0x39}], 0x1) 04:42:22 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1502000000000000) 04:42:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a010000) 04:42:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000779000/0x4000)=nil, 0x4000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x106) bind(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0x2, 0x8, 0x1}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000800)={r2, 0x1, 0x5}) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}, {0x2d, 'pids'}]}, 0xc) 04:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000806040000000000000000", 0x39}], 0x1) [ 2984.935101][T30880] 9pnet: p9_fd_create_tcp (30880): problem connecting socket to 127.0.0.1 [ 2984.951927][T30892] 9pnet: p9_fd_create_tcp (30892): problem connecting socket to 127.0.0.1 [ 2984.968425][ C0] sd 0:0:1:0: tag#6228 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2984.978287][ C0] sd 0:0:1:0: tag#6228 CDB: opcode=0xe5 (vendor) [ 2984.984645][ C0] sd 0:0:1:0: tag#6228 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2984.993684][ C0] sd 0:0:1:0: tag#6228 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2985.002731][ C0] sd 0:0:1:0: tag#6228 CDB[20]: ba 04:42:22 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x75) r1 = socket$inet6(0xa, 0x3, 0x106) bind(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r3, 0xfffffffe, 0x0) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f00000001c0)="29a9540eaa2259b9ada3c579e05e48bc62a14d97c7f6627c94ffd4223b335390f28f95b2db4ac344579a7fc48e586df07832d1b5e52dd2f422d8d155fb01d2b443076debe3ae94bf911e553acc11045ee1b0f6c63d7877465d5625f094a5d45b116215f236f2", 0x66, 0xfffffffffffffffa, 0x0, 0x0, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x80, r0, &(0x7f0000000280)="3f2ef4cc398e7e5b76767f937abb0a9dc52bacac1b155e8379e544a25a45f80c9d944680eb62d62b02831d9fe137243cc9d9f87235ac6283006b0dc811fe9a511e32949b3cc0c30c5353bdfa9796dda166af1b987b422a2abb7c58d84153182594a77495024ec62319b09a622d83547ea1", 0x71, 0x1, 0x0, 0x615f98fda6a5a484, r3}]) r4 = fsmount(r0, 0x0, 0xb) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000054000000e4e60bd6656f3bf0655ca59af3cedc1d30233fc733572311c877db853da0ac2ab857843f6fcd632ee41c2eb2bdbfb05ef3365a7590dcd7351c510de6006b0e19cc1c5cd442226c9492d2a4ba5375b059364c7623"]) r5 = socket$inet6(0xa, 0x3, 0x106) bind(r5, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000380)="8bea1318aef88ddd6054bfda7265e6ad1e7f4b43ede8723399706f94d1ff933d5978c0070e26b83c0273b396fa1f054fc40a90661e7ef172c9595e254665c548fe1bb7dbf6e970d796686dc66731f876f8da3ba4c4e5d8eb44088044295b796105c3ba3a717eeb9ebcebb89519269ab345ed", 0x72}, {&(0x7f0000000400)="6895b46f5a9c31405356d85d37719985351a0e0570ce69729617a8ca5deb2074cc3bbfc63a839e4d32506d58924aa6cfb9c52b4f698bf9d7c2833e5903cfb306fca9372a1ae03ae164443faad405f14a6bed516be6bd027415eb7c4e59a33b9b211203948097bcb0b65a57831edb695c20c7302cf44232463a484cfad7e7b981274cdba06b2eb348c0b3983bb2cd89668c9b0909a622f30dfecdedcf29a2215912bf39462f22e32ba5b6ab41bb7246258ce002191f48da45580bb83d47a5263a26bb826c87a9e0f030a2207b3644b9e839403d3ff144c150fdb065da6a2cdf6b1c00e317", 0xe4}, {&(0x7f0000000500)="9b03b04073c087eb7f874fdcd77d36a0f53c41363d9156c19bf63d23802a6664c3ce8fbd6ea39310536242698e9751e1ffd1ab15fa2c72a5ba3ff89e21dbcd364556a3ac10229f53c3ffec8b3e0f2aa498b994746ab4c0994a9568e8f349eb7d5b7f88591f7371657330a7510ccd7e1d9b2b76e7ddf04d2e765024dde5e085033f5bbfd422c4e6879e4832468ba2f62ae649713936182d04cd72215a4e5e676f876cea5dd273838a403755ca7960dee9f620cf938ca0db9acf339ae84df3a11087c8f5e7bd8bc1bdf1254eae003367cad3", 0xd1}, {&(0x7f0000000600)="e09b43c01a9c350904dbdf61eaa702c0077c1524d67add278ca4907dd387c6ff6992f3d28e4ae8d36d9b1b5547ec6f3b4fee83dad7f9f96138d67a543681b1cec0be0375d4f1bbe84d4611089f897a9aaffe9864e75332409734c16183c91d54c8ff0ab28e45d50cc2edbd9747c519a930b207698f2a168f078fa135683ecc9c874bc764399beb3094bf5454ff121b993724ef3217363324d3abde05a3f632cd464c3956cd09e417aca8febe71f104d31e4e89d263915e2a4eb449f89a570489310ee45b53da07f8810f40435c", 0xcd}, {&(0x7f0000000700)="cc81befdbd929e70c3da583f320aab4461a2268a86e96e80e45a9abf4d3a5f7a6891912605bd8406ce0af515267344434061c65ddf0329e32f98f017802dd190ecbc05a0e0e2cc62fd460e259c32f4fc97ee36974b23567e93bb57d83d871f01b2361b595f2a54f1798f8e295414d93f65f20fdced97333f905abaa6f9ed2df38a32042901b5f3d40895215660ab41b7e15524d28ba3d69ec74014b19126e9998b0db8f2ebce8214fd07ae0e94f72af4145d927385900e2e2fe9613d39197e3f5c0f3746ec8878c2adca", 0xca}], 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0x0, 0x0, 0x40}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 04:42:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000906040000000000000000", 0x39}], 0x1) 04:42:22 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1600000000000000) 04:42:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x3, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0xffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) getpriority(0x0, r0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3f}, 0x0) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x2, 0x31, 0x0, 0x2, 0x0, 0x3, 0x2, 0x8000, 0x1a365188}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clone(0x530a0480, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'veth0_virt_wifi\x00', {0x2, 0x0, @initdev}}) ptrace$cont(0x7, 0x0, 0x0, 0x0) getpid() 04:42:23 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000a06040000000000000000", 0x39}], 0x1) 04:42:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5a020000) 04:42:23 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1601000000000000) 04:42:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xe00000000000000) 04:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000b06040000000000000000", 0x39}], 0x1) [ 2985.795624][ C0] sd 0:0:1:0: tag#6229 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2985.805508][ C0] sd 0:0:1:0: tag#6229 CDB: opcode=0xe5 (vendor) [ 2985.811884][ C0] sd 0:0:1:0: tag#6229 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2985.820924][ C0] sd 0:0:1:0: tag#6229 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2985.829986][ C0] sd 0:0:1:0: tag#6229 CDB[20]: ba 04:42:23 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1602000000000000) 04:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000c06040000000000000000", 0x39}], 0x1) 04:42:23 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xe01000000000000) [ 2985.983330][ C1] sd 0:0:1:0: tag#6230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2985.993214][ C1] sd 0:0:1:0: tag#6230 CDB: opcode=0xe5 (vendor) [ 2985.999573][ C1] sd 0:0:1:0: tag#6230 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.008604][ C1] sd 0:0:1:0: tag#6230 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.017666][ C1] sd 0:0:1:0: tag#6230 CDB[20]: ba 04:42:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000d06040000000000000000", 0x39}], 0x1) 04:42:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="bad75e693175ff4ccfc4", 0xfffffec5}, {&(0x7f0000000300)="76df8cfefa7ddac22dcfcf9e00c693a47524fbfa60133f4bf9500ca94f344e4dd28a9ec9014befb0ea01a514ea8c7c66e5e88e77a778affc2a2030f7fbfa96fe6c14a0c75aee26637a81e3bcb693e7513645eb550c7adad4103ebae473f42372227fa59722490bdd9f2774cffe4bd181ffffffffffffffc3788e745965108c770cc26d1936bcc660d3ccbf2feaeb4603347ab0", 0x93}], 0x2, 0x8) close(r1) socket$nl_route(0x10, 0x3, 0x0) process_madvise(r0, &(0x7f00000013c0)=[{&(0x7f0000000000)="92267a91b9af57b4be", 0x9}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000000c0)="08ffd59d0a0ac5f33695bd1f1d0e9115a632b430e4ecb2b6bff828491271ca3b2a3fecc643f126b2d492ecc440bb9c07ad08f4f71dbcd4724f", 0x39}, {&(0x7f00000001c0)="240964757f08aa0e1505b85a7225ba6627d56e5ce8b2ab573ac8432b2cddb2ff883854fd33f55721ee7061dad421c7abd5a0f5eaad86d79ef9edf0f57505224426b39cffba21e3b2a63d676398ed61eabd2787049d05f50ff64c3e96b1c64c3f9515f8d501d8ec9dea1f290c4c2488e00ef6118b54824af0e00e51ee80661e235774ef3aafc049cc266c41faa31da546148c668691d09bc28e99892420b0c6d04e47b0efd73bda4e5db1717a7992df03e873287fc8b4aa14155c8691b074aa252291292152e640a88210c9b4ea9aba1e8b31d526af0353ef", 0xd8}, {&(0x7f0000000100)="b833d2cc970d26849805ff732fdbbce6fe28045098e4f77b0af41968dfe7a03b6999e06fb083d998575888c075e53b244736b3773184a9615e8c72681c66b04f997bae0f8def07eabaaac90dbdb7060a8025bb247ef08bcd12f1a698616d8078f23c3b3df903489c", 0x68}], 0x5, 0xd, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="220000001400256304000000000000040208031301000000080002", 0x1b) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) splice(r0, 0x0, r2, 0x0, 0xfff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r3, 0xfffffffe, 0x0) fchdir(r0) write$P9_RLOCK(r0, &(0x7f0000001540)={0x8, 0x35, 0x2}, 0x8) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf2557002bdf26ab0300", @ANYRES32=0x0, @ANYBLOB="0600950008000000060095000100000006009500000000000600950007000000060095001b1c0000"], 0x44}}, 0x80) 04:42:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5b000000) [ 2986.282798][ C1] sd 0:0:1:0: tag#6231 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.292747][ C1] sd 0:0:1:0: tag#6231 CDB: opcode=0xe5 (vendor) [ 2986.299088][ C1] sd 0:0:1:0: tag#6231 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.308134][ C1] sd 0:0:1:0: tag#6231 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.317256][ C1] sd 0:0:1:0: tag#6231 CDB[20]: ba 04:42:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:24 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1700000000000000) 04:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000e06040000000000000000", 0x39}], 0x1) 04:42:24 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x8, 0x81, 0xa057, {{0x2f, 0x4, 0x1, 0x2, 0xbc, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@generic={0x89, 0xd, "760408c139b89c08a7cab4"}, @noop, @timestamp={0x44, 0x20, 0xa9, 0x0, 0x4, [0x3b08, 0xfffffffd, 0x4, 0x0, 0x1, 0x8001, 0x2]}, @generic={0x44, 0x4, "9cd6"}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0xd, [0x80000000, 0xfff, 0x101, 0x4, 0x8000, 0x0, 0x7, 0x5, 0x1]}, @generic={0x94, 0x11, "fb62af275bb1d508c48512a420dae0"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x7, 0x2}, @cipso={0x86, 0x31, 0x1, [{0x5, 0xf, "ef697801d2c76eb0814990468e"}, {0x6, 0x7, "22b3c14b33"}, {0x0, 0x12, "4b6dfec3d6dbf44a8eaea8c0c99af6f1"}, {0x2, 0x3, 'c'}]}]}}}}}) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)="e7c8953e4f8fca3f0fb4ab7c006951ee5b5153da8332e14a4738baa73d1a1ed581712199fda4124bc195c8eff2fb3b90d55e9311d9c3e0ed81967ee3f4355ce6cec755bca996eebe2806a91b01d9ffe388c511ea0bc608bd9b3eb6ee1470a31883a0ac147ce09fc60c24e9112bad3ad59fc8d7b59fafd816596dd9dc16e44adeb5ee7e8441aa69583109b5425259cf21b7db3e11f2c5317f5a9d51e3ea82078f2922c2f22c2f4438843254dc6047a53bee22f41c0a2607c56cbdeb5c10caee162349b18e9b4127905cd75fd0af7195b2f4d4a3", 0xd3) 04:42:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xe02000000000000) 04:42:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5b010000) 04:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001006040000000000000000", 0x39}], 0x1) [ 2986.720010][ C1] sd 0:0:1:0: tag#6232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.729882][ C1] sd 0:0:1:0: tag#6232 CDB: opcode=0xe5 (vendor) [ 2986.736217][ C1] sd 0:0:1:0: tag#6232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2986.745366][ C1] sd 0:0:1:0: tag#6232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2986.754409][ C1] sd 0:0:1:0: tag#6232 CDB[20]: ba 04:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001106040000000000000000", 0x39}], 0x1) 04:42:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf00000000000000) 04:42:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5b020000) 04:42:24 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1701000000000000) 04:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001206040000000000000000", 0x39}], 0x1) [ 2986.984784][ C1] sd 0:0:1:0: tag#6234 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2986.994689][ C1] sd 0:0:1:0: tag#6234 CDB: opcode=0xe5 (vendor) [ 2987.001031][ C1] sd 0:0:1:0: tag#6234 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2987.010065][ C1] sd 0:0:1:0: tag#6234 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2987.019078][ C1] sd 0:0:1:0: tag#6234 CDB[20]: ba 04:42:24 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001606040000000000000000", 0x39}], 0x1) 04:42:24 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1702000000000000) 04:42:24 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5c000000) 04:42:24 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf01000000000000) 04:42:24 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x8, 0x81, 0xa057, {{0x2f, 0x4, 0x1, 0x2, 0xbc, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@generic={0x89, 0xd, "760408c139b89c08a7cab4"}, @noop, @timestamp={0x44, 0x20, 0xa9, 0x0, 0x4, [0x3b08, 0xfffffffd, 0x4, 0x0, 0x1, 0x8001, 0x2]}, @generic={0x44, 0x4, "9cd6"}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0xd, [0x80000000, 0xfff, 0x101, 0x4, 0x8000, 0x0, 0x7, 0x5, 0x1]}, @generic={0x94, 0x11, "fb62af275bb1d508c48512a420dae0"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x7, 0x2}, @cipso={0x86, 0x31, 0x1, [{0x5, 0xf, "ef697801d2c76eb0814990468e"}, {0x6, 0x7, "22b3c14b33"}, {0x0, 0x12, "4b6dfec3d6dbf44a8eaea8c0c99af6f1"}, {0x2, 0x3, 'c'}]}]}}}}}) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)="e7c8953e4f8fca3f0fb4ab7c006951ee5b5153da8332e14a4738baa73d1a1ed581712199fda4124bc195c8eff2fb3b90d55e9311d9c3e0ed81967ee3f4355ce6cec755bca996eebe2806a91b01d9ffe388c511ea0bc608bd9b3eb6ee1470a31883a0ac147ce09fc60c24e9112bad3ad59fc8d7b59fafd816596dd9dc16e44adeb5ee7e8441aa69583109b5425259cf21b7db3e11f2c5317f5a9d51e3ea82078f2922c2f22c2f4438843254dc6047a53bee22f41c0a2607c56cbdeb5c10caee162349b18e9b4127905cd75fd0af7195b2f4d4a3", 0xd3) [ 2987.583608][ C0] sd 0:0:1:0: tag#6238 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2987.593606][ C0] sd 0:0:1:0: tag#6238 CDB: opcode=0xe5 (vendor) [ 2987.600598][ C0] sd 0:0:1:0: tag#6238 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2987.609648][ C0] sd 0:0:1:0: tag#6238 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2987.618673][ C0] sd 0:0:1:0: tag#6238 CDB[20]: ba 04:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001706040000000000000000", 0x39}], 0x1) 04:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001806040000000000000000", 0x39}], 0x1) 04:42:25 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1800000000000000) 04:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001906040000000000000000", 0x39}], 0x1) 04:42:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf02000000000000) 04:42:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5c010000) 04:42:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000001f06040000000000000000", 0x39}], 0x1) 04:42:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1000000000000000) 04:42:25 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1801000000000000) 04:42:25 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x8, 0x81, 0xa057, {{0x2f, 0x4, 0x1, 0x2, 0xbc, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@generic={0x89, 0xd, "760408c139b89c08a7cab4"}, @noop, @timestamp={0x44, 0x20, 0xa9, 0x0, 0x4, [0x3b08, 0xfffffffd, 0x4, 0x0, 0x1, 0x8001, 0x2]}, @generic={0x44, 0x4, "9cd6"}, @timestamp={0x44, 0x28, 0xb2, 0x0, 0xd, [0x80000000, 0xfff, 0x101, 0x4, 0x8000, 0x0, 0x7, 0x5, 0x1]}, @generic={0x94, 0x11, "fb62af275bb1d508c48512a420dae0"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x7, 0x2}, @cipso={0x86, 0x31, 0x1, [{0x5, 0xf, "ef697801d2c76eb0814990468e"}, {0x6, 0x7, "22b3c14b33"}, {0x0, 0x12, "4b6dfec3d6dbf44a8eaea8c0c99af6f1"}, {0x2, 0x3, 'c'}]}]}}}}}) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000040)="e7c8953e4f8fca3f0fb4ab7c006951ee5b5153da8332e14a4738baa73d1a1ed581712199fda4124bc195c8eff2fb3b90d55e9311d9c3e0ed81967ee3f4355ce6cec755bca996eebe2806a91b01d9ffe388c511ea0bc608bd9b3eb6ee1470a31883a0ac147ce09fc60c24e9112bad3ad59fc8d7b59fafd816596dd9dc16e44adeb5ee7e8441aa69583109b5425259cf21b7db3e11f2c5317f5a9d51e3ea82078f2922c2f22c2f4438843254dc6047a53bee22f41c0a2607c56cbdeb5c10caee162349b18e9b4127905cd75fd0af7195b2f4d4a3", 0xd3) 04:42:25 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5c020000) [ 2988.422952][T31222] validate_nla: 74 callbacks suppressed [ 2988.422964][T31222] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.461305][T31222] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.493615][T31222] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.524642][T31235] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000002006040000000000000000", 0x39}], 0x1) 04:42:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5d000000) 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000003f06040000000000000000", 0x39}], 0x1) [ 2988.601240][T31242] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.616733][T31242] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.629032][T31242] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.640484][T31248] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:26 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1802000000000000) [ 2988.682112][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 2988.682143][ C0] sd 0:0:1:0: tag#6261 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2988.698803][ C0] sd 0:0:1:0: tag#6261 CDB: opcode=0xe5 (vendor) [ 2988.705155][ C0] sd 0:0:1:0: tag#6261 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2988.714289][ C0] sd 0:0:1:0: tag#6261 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2988.723437][ C0] sd 0:0:1:0: tag#6261 CDB[20]: ba 04:42:26 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1001000000000000) [ 2988.749132][T31257] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2988.769150][T31257] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000004e06040000000000000000", 0x39}], 0x1) 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000005006040000000000000000", 0x39}], 0x1) 04:42:26 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5d010000) 04:42:26 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1900000000000000) 04:42:26 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1002000000000000) 04:42:26 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1802000000000000) 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000005206040000000000000000", 0x39}], 0x1) [ 2989.288725][ C1] sd 0:0:1:0: tag#6269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.298590][ C1] sd 0:0:1:0: tag#6269 CDB: opcode=0xe5 (vendor) [ 2989.304981][ C1] sd 0:0:1:0: tag#6269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.314114][ C1] sd 0:0:1:0: tag#6269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.323238][ C1] sd 0:0:1:0: tag#6269 CDB[20]: ba 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000005406040000000000000000", 0x39}], 0x1) 04:42:26 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1901000000000000) 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000005806040000000000000000", 0x39}], 0x1) 04:42:26 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5d020000) 04:42:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000005e06040000000000000000", 0x39}], 0x1) 04:42:27 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x41) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) renameat2(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000080)='./file0\x00', 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="2000000000000000000000030000000002000000000000000004000000000000020000100000000001010000000400e49ee2264000010000803f0000fffc08c055e80000060000000200000000000000040000eaffffff000200000000000000ff0f000000000000380000000000000000000000000000000800000000000000000000000000000000ca9fe5f07b32e149000000000000000000000000000000236b0637800d1f9d5ffefa7b1a1f782d1a9d36fa6d663b8a6ebe9e2b460e18a1e973fdd6cbe07c00d115d6cab4c05f59a77796e8d1dfcf9ca2b8149df025e907c89e6317ad6660d0b71a07e24b60"]) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000064600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000065600)={0x7fffffff, [{}, {r8}, {r5}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8b531a5931e2c5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000066600)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {0x0, r16}, {r17}], 0x8, "c5b5b3521bd9ba"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d707665c00644e504ffffe03f", @ANYRESDEC]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004a5c0)={0x0, r18, "c1dee44029e2dd2b63abc9f681973a8bd88e54f8517b2a026024da454643c901bcbac682bc281967ec2da9b74e4bf5485e74570455617a9452e8268a410b7e7d8d6cfc55289e6b99fa32b34dcb0f332ce690a2144f18c0f78d851a503ff4bb0817f838fbcb5bf21672ac2324b784c5c64bce47cc075299d9cad0f028b4087fd24cbfb1879944579a59d151cda4128969cac177c7a640b5d1fe6e033f8887e5924693607619cf59b288b6a5dd06c2fe560cb9907f2ff91a89e864f8b6eaadb78dd10925f27f916995bc0a17c72709ed026d3b622504105270d147a3f4d77e669fac865d674e4414806894888774c458229b5e9ade52cdc5811e24a4882765bfb2", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000004b5c0)={0x0, r11, "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", "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"}) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) 04:42:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1100000000000000) [ 2989.596037][ C0] sd 0:0:1:0: tag#6270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.606049][ C0] sd 0:0:1:0: tag#6270 CDB: opcode=0xe5 (vendor) [ 2989.612420][ C0] sd 0:0:1:0: tag#6270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.621471][ C0] sd 0:0:1:0: tag#6270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.625475][T31350] tmpfs: Bad value for 'mpol' [ 2989.630874][ C0] sd 0:0:1:0: tag#6270 CDB[20]: ba [ 2989.647462][T31356] tmpfs: Bad value for 'mpol' [ 2989.659918][T31351] tmpfs: Bad value for 'mpol' [ 2989.708968][ C1] sd 0:0:1:0: tag#6271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2989.718915][ C1] sd 0:0:1:0: tag#6271 CDB: opcode=0xe5 (vendor) [ 2989.725269][ C1] sd 0:0:1:0: tag#6271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2989.734410][ C1] sd 0:0:1:0: tag#6271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2989.743553][ C1] sd 0:0:1:0: tag#6271 CDB[20]: ba 04:42:27 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000006006040000000000000000", 0x39}], 0x1) 04:42:27 executing program 5: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002d40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') preadv(r0, &(0x7f0000000080), 0x0, 0x7d3, 0x1ff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058d40)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "b7361a2fff8fb3"}) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x16, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5d1358774bb84db40b8585ba8d47d34d3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x2, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x3, 0x3, 0x3f, 0x0, 0x0, 0x5, 0xc84, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x40008, 0x8, 0xfffff803, 0x6, 0x72c65cd0, 0x5, 0x8, 0x0, 0x4, 0x0, 0xefac}, 0x0, 0x6, r4, 0x86145bf760470f82) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) 04:42:27 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1902000000000000) 04:42:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1101000000000000) 04:42:27 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5e000000) [ 2990.233229][ C0] sd 0:0:1:0: tag#6208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2990.243101][ C0] sd 0:0:1:0: tag#6208 CDB: opcode=0xe5 (vendor) [ 2990.249489][ C0] sd 0:0:1:0: tag#6208 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2990.258571][ C0] sd 0:0:1:0: tag#6208 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2990.267312][T31382] 9pnet: p9_fd_create_tcp (31382): problem connecting socket to 127.0.0.1 [ 2990.267624][ C0] sd 0:0:1:0: tag#6208 CDB[20]: ba 04:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000006206040000000000000000", 0x39}], 0x1) 04:42:27 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c80) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 04:42:27 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1a00000000000000) 04:42:27 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1102000000000000) 04:42:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ffffffc306040000000000000000", 0x39}], 0x1) [ 2990.341866][T31390] 9pnet: p9_fd_create_tcp (31390): problem connecting socket to 127.0.0.1 04:42:27 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001640)=""/40, 0x28}, {&(0x7f0000001680)=""/166, 0xa6}], 0x3}}], 0x3, 0x2040, &(0x7f0000001840)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d0000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x7, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x204, 0x0, 0x23456}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x0, 0x0, 0x0) 04:42:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:28 executing program 5: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x1, 0x3, 0x17}) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r5, 0x0, 0x4) io_uring_enter(r5, 0x4aec, 0xe0f9, 0x2, &(0x7f0000000140)={[0xff]}, 0x8) syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ffffffe006040000000000000000", 0x39}], 0x1) 04:42:28 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5e010000) 04:42:28 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1a01000000000000) 04:42:28 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1200000000000000) 04:42:28 executing program 5: chdir(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r1, 0x0, 0x8400fffffffa) 04:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ffffffea06040000000000000000", 0x39}], 0x1) [ 2991.102917][ C1] sd 0:0:1:0: tag#6209 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2991.112791][ C1] sd 0:0:1:0: tag#6209 CDB: opcode=0xe5 (vendor) [ 2991.119158][ C1] sd 0:0:1:0: tag#6209 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2991.128181][ C1] sd 0:0:1:0: tag#6209 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2991.137250][ C1] sd 0:0:1:0: tag#6209 CDB[20]: ba 04:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000000fc06040000000000000000", 0x39}], 0x1) 04:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fffffffc06040000000000000000", 0x39}], 0x1) 04:42:28 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1201000000000000) 04:42:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000000fd06040000000000000000", 0x39}], 0x1) 04:42:29 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:29 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1a02000000000000) 04:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fffffffd06040000000000000000", 0x39}], 0x1) 04:42:29 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1202000000000000) 04:42:29 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5e020000) [ 2992.008430][T31464] ================================================================== [ 2992.016633][T31464] BUG: KCSAN: data-race in ext4_setattr / filemap_read [ 2992.023496][T31464] [ 2992.025817][T31464] write to 0xffff8881df26c798 of 8 bytes by task 31517 on cpu 1: [ 2992.033528][T31464] ext4_setattr+0xd7f/0xef0 [ 2992.038123][T31464] notify_change+0x8a3/0xac0 [ 2992.042807][T31464] do_truncate+0xf7/0x140 [ 2992.047482][T31464] path_openat+0x1925/0x1ec0 [ 2992.052076][T31464] do_filp_open+0x105/0x220 [ 2992.056586][T31464] do_sys_openat2+0xb5/0x2b0 [ 2992.061174][T31464] __x64_sys_creat+0x62/0x80 [ 2992.065753][T31464] do_syscall_64+0x44/0xa0 [ 2992.070178][T31464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2992.076072][T31464] [ 2992.078385][T31464] read to 0xffff8881df26c798 of 8 bytes by task 31464 on cpu 0: [ 2992.086002][T31464] filemap_read+0xd55/0x1220 [ 2992.090588][T31464] generic_file_read_iter+0x75/0x2c0 [ 2992.095875][T31464] ext4_file_read_iter+0x1db/0x290 [ 2992.100984][T31464] generic_file_splice_read+0x24f/0x330 [ 2992.106524][T31464] splice_direct_to_actor+0x2aa/0x650 [ 2992.111894][T31464] do_splice_direct+0x106/0x190 [ 2992.116731][T31464] do_sendfile+0x63e/0xbb0 [ 2992.121154][T31464] __x64_sys_sendfile64+0x102/0x140 [ 2992.126355][T31464] do_syscall_64+0x44/0xa0 [ 2992.130770][T31464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2992.136657][T31464] [ 2992.138965][T31464] value changed: 0x0000000000f9ae01 -> 0x0000000000000000 [ 2992.146060][T31464] [ 2992.148372][T31464] Reported by Kernel Concurrency Sanitizer on: 04:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ffff80fe06040000000000000000", 0x39}], 0x1) [ 2992.154514][T31464] CPU: 0 PID: 31464 Comm: syz-executor.5 Not tainted 5.15.0-rc1-syzkaller #0 [ 2992.163367][T31464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2992.173516][T31464] ================================================================== 04:42:29 executing program 5: r0 = memfd_create(&(0x7f0000000400)='\v\xa4J\fIJ\"!w\xe5\n\xfaU\xa9\r\x8b\xf7&d\xa0\xe3\x9dh$X\x14se\x1c\xf0\xdb(\x96}\x9e\x1d>2\xa7\xdf\xa0\xb1\xf28\xd12b\x1d!\xa4\x0f\x9b\xda\xd8)\x98\xfb\xc1\xf3X\xcf\xdf\xa9d(\x9b\xd6+\xd7-\x8a\xe5\x15T1\xc8[Er\x1dF(3\xedfpe7\xa8\xca:\xb1\x97\x94E\xab\xda\x10XvF#\xae\xc7]vO|\x819\xd2x`\x00\x00\x00\rad\xab\xe8j\xb8-\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x100013, r0, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) writev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="2d13368a655ad4c3feaf02cde4b694d9becbad4e471fbf2ebb5e42e473bc94ae144c6ac91a7386a2863742b8d055b5d4f246807574fb6079e919ec7b73329fbb952f27a3e7352d05fdf28a0837fda7dd3bfd2015cb08fe03b47359d4fa7d47213fb94526273b2c3228f46d5022931f4e425b344912ab1b261802fbd1277028214f853c", 0x83}, {&(0x7f0000001040)="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", 0xf5c}], 0x2) symlink(&(0x7f0000001000)='./bus\x00', &(0x7f00000000c0)='./bus\x00') 04:42:29 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1b00000000000000) [ 2992.204624][ C0] sd 0:0:1:0: tag#6210 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.214462][ C0] sd 0:0:1:0: tag#6210 CDB: opcode=0xe5 (vendor) [ 2992.220835][ C0] sd 0:0:1:0: tag#6210 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.229904][ C0] sd 0:0:1:0: tag#6210 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.238968][ C0] sd 0:0:1:0: tag#6210 CDB[20]: ba 04:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000ffffc0fe06040000000000000000", 0x39}], 0x1) 04:42:29 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5f000000) 04:42:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="687567653d615f5ca03773"]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052c00)={0xa163, [], 0x2, "e69dcd19d6f971"}) r2 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r3, 0x2008001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000200", @ANYRES16=0x0, @ANYBLOB="768a27bd7000fbdbdf25030000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0x11fffff90}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0x7ffff000}], 0x6, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) 04:42:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fffffffe06040000000000000000", 0x39}], 0x1) [ 2992.475614][ C0] sd 0:0:1:0: tag#6211 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.483350][T31550] tmpfs: Bad value for 'huge' [ 2992.485515][ C0] sd 0:0:1:0: tag#6211 CDB: opcode=0xe5 (vendor) [ 2992.496545][ C0] sd 0:0:1:0: tag#6211 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.505816][ C0] sd 0:0:1:0: tag#6211 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.514926][ C0] sd 0:0:1:0: tag#6211 CDB[20]: ba [ 2992.742283][T31550] tmpfs: Bad value for 'huge' 04:42:30 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000000ff06040000000000000000", 0x39}], 0x1) 04:42:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1300000000000000) 04:42:30 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1b01000000000000) 04:42:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5f010000) 04:42:30 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r2, 0xfffffffe, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) 04:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000ffff06040000000000000000", 0x39}], 0x1) 04:42:30 executing program 5: gettid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000980)={0x0, 0xfffffffffffffffe, 0x4, 0x40, @scatter={0x7, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000700)=""/129, 0x81}]}, &(0x7f0000000300)="7c055f0f", &(0x7f0000000840)=""/217, 0x3, 0x6, 0x1, &(0x7f0000000940)}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2060400) sendfile(r1, r2, 0x0, 0x3) r4 = gettid() clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000a00)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2992.890800][ C0] sd 0:0:1:0: tag#6230 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2992.900656][ C0] sd 0:0:1:0: tag#6230 CDB: opcode=0xe5 (vendor) [ 2992.907075][ C0] sd 0:0:1:0: tag#6230 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2992.916148][ C0] sd 0:0:1:0: tag#6230 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2992.925178][ C0] sd 0:0:1:0: tag#6230 CDB[20]: ba 04:42:30 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1301000000000000) 04:42:30 executing program 5: gettid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000980)={0x0, 0xfffffffffffffffe, 0x4, 0x40, @scatter={0x7, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000700)=""/129, 0x81}]}, &(0x7f0000000300)="7c055f0f", &(0x7f0000000840)=""/217, 0x3, 0x6, 0x1, &(0x7f0000000940)}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2060400) sendfile(r1, r2, 0x0, 0x3) r4 = gettid() clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000a00)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:42:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fe80ffff06040000000000000000", 0x39}], 0x1) 04:42:30 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5f020000) [ 2993.150064][ C0] sd 0:0:1:0: tag#6231 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2993.159936][ C0] sd 0:0:1:0: tag#6231 CDB: opcode=0xe5 (vendor) [ 2993.166272][ C0] sd 0:0:1:0: tag#6231 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2993.175414][ C0] sd 0:0:1:0: tag#6231 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2993.184460][ C0] sd 0:0:1:0: tag#6231 CDB[20]: ba 04:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fec0ffff06040000000000000000", 0x39}], 0x1) 04:42:31 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:31 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1b02000000000000) 04:42:31 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1302000000000000) 04:42:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x60000000) [ 2993.743937][ C1] sd 0:0:1:0: tag#6232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2993.752332][T31667] validate_nla: 86 callbacks suppressed [ 2993.752347][T31667] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2993.753807][ C1] sd 0:0:1:0: tag#6232 CDB: opcode=0xe5 (vendor) [ 2993.774108][ C1] sd 0:0:1:0: tag#6232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2993.783158][ C1] sd 0:0:1:0: tag#6232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2993.792190][ C1] sd 0:0:1:0: tag#6232 CDB[20]: ba [ 2993.798587][T31667] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2993.829670][T31667] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200007fffffff06040000000000000000", 0x39}], 0x1) [ 2993.877881][T31674] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:31 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1c00000000000000) [ 2993.942355][T31679] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2993.957591][T31679] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2993.972513][T31679] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000c3ffffff06040000000000000000", 0x39}], 0x1) [ 2993.992654][T31682] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:31 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x60010000) [ 2994.078075][T31695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2994.104282][T31695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2994.134867][ C0] sd 0:0:1:0: tag#6233 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2994.144730][ C0] sd 0:0:1:0: tag#6233 CDB: opcode=0xe5 (vendor) [ 2994.151079][ C0] sd 0:0:1:0: tag#6233 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2994.160126][ C0] sd 0:0:1:0: tag#6233 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2994.169180][ C0] sd 0:0:1:0: tag#6233 CDB[20]: ba [ 2994.204241][ C1] sd 0:0:1:0: tag#6234 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2994.214082][ C1] sd 0:0:1:0: tag#6234 CDB: opcode=0xe5 (vendor) [ 2994.220422][ C1] sd 0:0:1:0: tag#6234 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2994.229458][ C1] sd 0:0:1:0: tag#6234 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2994.238485][ C1] sd 0:0:1:0: tag#6234 CDB[20]: ba 04:42:33 executing program 5: gettid() r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000980)={0x0, 0xfffffffffffffffe, 0x4, 0x40, @scatter={0x7, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000700)=""/129, 0x81}]}, &(0x7f0000000300)="7c055f0f", &(0x7f0000000840)=""/217, 0x3, 0x6, 0x1, &(0x7f0000000940)}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x2060400) sendfile(r1, r2, 0x0, 0x3) r4 = gettid() clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000a00)) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:42:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1400000000000000) 04:42:33 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1c01000000000000) 04:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000e0ffffff06040000000000000000", 0x39}], 0x1) 04:42:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x60020000) 04:42:33 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000eaffffff06040000000000000000", 0x39}], 0x1) [ 2996.110596][ C1] sd 0:0:1:0: tag#6235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2996.120465][ C1] sd 0:0:1:0: tag#6235 CDB: opcode=0xe5 (vendor) [ 2996.126820][ C1] sd 0:0:1:0: tag#6235 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2996.135873][ C1] sd 0:0:1:0: tag#6235 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2996.144921][ C1] sd 0:0:1:0: tag#6235 CDB[20]: ba 04:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fcffffff06040000000000000000", 0x39}], 0x1) 04:42:33 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1c02000000000000) 04:42:33 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1401000000000000) 04:42:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000fdffffff06040000000000000000", 0x39}], 0x1) 04:42:33 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x61000000) [ 2996.416823][ C1] sd 0:0:1:0: tag#6236 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2996.426695][ C1] sd 0:0:1:0: tag#6236 CDB: opcode=0xe5 (vendor) [ 2996.433221][ C1] sd 0:0:1:0: tag#6236 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2996.442257][ C1] sd 0:0:1:0: tag#6236 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2996.451319][ C1] sd 0:0:1:0: tag#6236 CDB[20]: ba 04:42:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = gettid() fcntl$setown(r0, 0x8, r1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() ptrace$setregs(0xd, r2, 0x3f, &(0x7f00000000c0)="64c155a9140af02795da216e0b8d27ee2dbbaa7862ba97ac2a96fce0564f04b0e28985ef3bb15998bc") sched_setattr(r2, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x92000998) rmdir(&(0x7f0000000100)='./control\x00') 04:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000feffffff06040000000000000000", 0x39}], 0x1) 04:42:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1402000000000000) 04:42:36 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x61010000) 04:42:36 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1d00000000000000) 04:42:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) [ 2999.090615][T31801] validate_nla: 18 callbacks suppressed [ 2999.090628][T31801] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2999.110525][T31801] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2999.138682][ C0] sd 0:0:1:0: tag#6237 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2999.148541][ C0] sd 0:0:1:0: tag#6237 CDB: opcode=0xe5 (vendor) [ 2999.154873][ C0] sd 0:0:1:0: tag#6237 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2999.163939][ C0] sd 0:0:1:0: tag#6237 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2999.173069][ C0] sd 0:0:1:0: tag#6237 CDB[20]: ba [ 2999.183002][T31801] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000bc0)={[{@fat=@flush}, {@fat=@errors_remount}]}) open(&(0x7f0000000000)='./file0\x00', 0x20004, 0x94) [ 2999.205990][T31821] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000001040000000000000000", 0x39}], 0x1) 04:42:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1a0d2, 0x7fff}) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x205, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r0, &(0x7f0000000100)=0x1, 0x659) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582b, &(0x7f0000000040)=0x700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) close(r0) close(r1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)) [ 2999.305237][T31838] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:36 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1d01000000000000) [ 2999.359852][T31849] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2999.393443][T31838] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:36 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1500000000000000) [ 2999.439002][T31849] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000003040000000000000000", 0x39}], 0x1) 04:42:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x61020000) 04:42:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1d02000000000000) 04:42:37 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) setfsuid(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 2999.550260][T31874] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2999.579520][T31874] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000002000006040000000000000000", 0x39}], 0x1) [ 2999.653131][ C1] sd 0:0:1:0: tag#6258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2999.663007][ C1] sd 0:0:1:0: tag#6258 CDB: opcode=0xe5 (vendor) [ 2999.669363][ C1] sd 0:0:1:0: tag#6258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2999.678384][ C1] sd 0:0:1:0: tag#6258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2999.687448][ C1] sd 0:0:1:0: tag#6258 CDB[20]: ba 04:42:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1e00000000000000) 04:42:37 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1501000000000000) 04:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000003000006040000000000000000", 0x39}], 0x1) 04:42:37 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1e01000000000000) 04:42:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x62000000) 04:42:37 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0xfffffffe, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005880), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010125bd7000fbdbdf2535000000080003"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000059c0)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005980)={&(0x7f0000005940)={0x30, r2, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8c, 0x6c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000005880), 0x400000, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000180)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7000, 0x31}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x2a000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010125bd7000fbdbdf2535000000080003"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000059c0)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005980)={&(0x7f0000005940)={0x30, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8c, 0x6c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002cbd7000ffdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB="0c009900060000006a000000"], 0x28}, 0x1, 0x0, 0x0, 0x20d1}, 0x4010) r10 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000000)={{}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @multicast1}, 'sit0\x00'}) [ 3000.021518][ C1] sd 0:0:1:0: tag#6259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3000.031387][ C1] sd 0:0:1:0: tag#6259 CDB: opcode=0xe5 (vendor) [ 3000.037733][ C1] sd 0:0:1:0: tag#6259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3000.046878][ C1] sd 0:0:1:0: tag#6259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3000.055919][ C1] sd 0:0:1:0: tag#6259 CDB[20]: ba 04:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000004000006040000000000000000", 0x39}], 0x1) [ 3000.081207][T31944] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3000.113695][T31952] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3000.123582][T31960] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.5'. 04:42:37 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1502000000000000) 04:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000005000006040000000000000000", 0x39}], 0x1) 04:42:37 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0xffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000000000000025000000040016000c0001000500001f00000606040000000000000000", 0x39}], 0x1) fallocate(r0, 0x1, 0x0, 0x9) 04:42:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000006000006040000000000000000", 0x39}], 0x1) 04:42:37 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x62010000) [ 3000.316161][T31983] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3000.371695][T31987] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3000.412742][ C0] sd 0:0:1:0: tag#6260 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3000.422611][ C0] sd 0:0:1:0: tag#6260 CDB: opcode=0xe5 (vendor) [ 3000.428995][ C0] sd 0:0:1:0: tag#6260 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3000.438106][ C0] sd 0:0:1:0: tag#6260 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3000.447175][ C0] sd 0:0:1:0: tag#6260 CDB[20]: ba 04:42:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:38 executing program 5: mkdir(&(0x7f0000000140)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control\x00', 0x9e) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./control\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./control\x00') openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) 04:42:38 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1e02000000000000) 04:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000007000006040000000000000000", 0x39}], 0x1) 04:42:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1600000000000000) 04:42:38 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x62020000) 04:42:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4) r2 = epoll_create(0x5) r3 = epoll_create1(0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x3, 0x106) bind(r5, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0x4}, 0x80) dup2(r5, r1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x210442, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 3000.878421][ C1] sd 0:0:1:0: tag#6261 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3000.888287][ C1] sd 0:0:1:0: tag#6261 CDB: opcode=0xe5 (vendor) [ 3000.894709][ C1] sd 0:0:1:0: tag#6261 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3000.903784][ C1] sd 0:0:1:0: tag#6261 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3000.912931][ C1] sd 0:0:1:0: tag#6261 CDB[20]: ba 04:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000008000006040000000000000000", 0x39}], 0x1) 04:42:38 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1601000000000000) 04:42:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x4}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r1, 0xfffffffe, 0x1) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x404882, 0x4) open_by_handle_at(r2, &(0x7f0000000280)=@ceph_nfs_confh={0x10, 0x2, {0x800}}, 0x721201) 04:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000009000006040000000000000000", 0x39}], 0x1) 04:42:38 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1f00000000000000) 04:42:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000a000006040000000000000000", 0x39}], 0x1) 04:42:39 executing program 4: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}}], 0x11, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) 04:42:39 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() r0 = gettid() process_vm_writev(r0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x100000000000021b, 0x0) pkey_mprotect(&(0x7f0000118000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006140), 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x106) bind(r1, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000040)=0x6, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000180)=""/156, 0x9c}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/80, 0x50}], 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000b000006040000000000000000", 0x39}], 0x1) 04:42:39 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x1602000000000000) 04:42:39 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1f01000000000000) 04:42:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8181, 0x0) getdents64(r4, &(0x7f0000000200)=""/4096, 0x1000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x1, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x63000000) 04:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000c000006040000000000000000", 0x39}], 0x1) [ 3001.782295][ C0] sd 0:0:1:0: tag#6262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 3001.792171][ C0] sd 0:0:1:0: tag#6262 CDB: opcode=0xe5 (vendor) [ 3001.798527][ C0] sd 0:0:1:0: tag#6262 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 3001.807562][ C0] sd 0:0:1:0: tag#6262 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 3001.816618][ C0] sd 0:0:1:0: tag#6262 CDB[20]: ba 04:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000d000006040000000000000000", 0x39}], 0x1) 04:42:39 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3969, &(0x7f0000001600), &(0x7f0000002000/0x2000)=nil, &(0x7f00003ea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x1f02000000000000) 04:42:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00020000000e000006040000000000000000", 0x39}], 0x1)