xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1701.384860][ C0] sd 0:0:1:0: tag#6850 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1701.394722][ C0] sd 0:0:1:0: tag#6850 CDB: opcode=0xe5 (vendor) [ 1701.401103][ C0] sd 0:0:1:0: tag#6850 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1701.410140][ C0] sd 0:0:1:0: tag#6850 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1701.419169][ C0] sd 0:0:1:0: tag#6850 CDB[20]: ba [ 1703.755625][ C1] sd 0:0:1:0: tag#6913 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1703.765500][ C1] sd 0:0:1:0: tag#6913 CDB: opcode=0xe5 (vendor) [ 1703.771858][ C1] sd 0:0:1:0: tag#6913 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1703.780910][ C1] sd 0:0:1:0: tag#6913 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1703.789945][ C1] sd 0:0:1:0: tag#6913 CDB[20]: ba 03:15:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x0, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1705.218977][ C1] sd 0:0:1:0: tag#6881 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1705.228853][ C1] sd 0:0:1:0: tag#6881 CDB: opcode=0xe5 (vendor) [ 1705.235189][ C1] sd 0:0:1:0: tag#6881 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1705.244245][ C1] sd 0:0:1:0: tag#6881 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1705.253302][ C1] sd 0:0:1:0: tag#6881 CDB[20]: ba [ 1705.482564][ C0] sd 0:0:1:0: tag#6885 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1705.492625][ C0] sd 0:0:1:0: tag#6885 CDB: opcode=0xe5 (vendor) [ 1705.499060][ C0] sd 0:0:1:0: tag#6885 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1705.508190][ C0] sd 0:0:1:0: tag#6885 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1705.517246][ C0] sd 0:0:1:0: tag#6885 CDB[20]: ba [ 1707.227154][ C1] sd 0:0:1:0: tag#6897 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1707.237024][ C1] sd 0:0:1:0: tag#6897 CDB: opcode=0xe5 (vendor) [ 1707.243459][ C1] sd 0:0:1:0: tag#6897 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1707.252767][ C1] sd 0:0:1:0: tag#6897 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1707.261812][ C1] sd 0:0:1:0: tag#6897 CDB[20]: ba 03:15:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r2, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1708.914502][ C0] sd 0:0:1:0: tag#7042 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1708.924364][ C0] sd 0:0:1:0: tag#7042 CDB: opcode=0xe5 (vendor) [ 1708.930714][ C0] sd 0:0:1:0: tag#7042 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1708.939754][ C0] sd 0:0:1:0: tag#7042 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1708.948810][ C0] sd 0:0:1:0: tag#7042 CDB[20]: ba 03:15:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1710.108027][ C1] sd 0:0:1:0: tag#6915 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1710.112208][ C0] sd 0:0:1:0: tag#6864 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1710.118083][ C1] sd 0:0:1:0: tag#6915 CDB: opcode=0xe5 (vendor) [ 1710.128029][ C0] sd 0:0:1:0: tag#6864 CDB: opcode=0xe5 (vendor) [ 1710.128046][ C0] sd 0:0:1:0: tag#6864 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1710.134382][ C1] sd 0:0:1:0: tag#6915 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1710.140678][ C0] sd 0:0:1:0: tag#6864 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1710.140696][ C0] sd 0:0:1:0: tag#6864 CDB[20]: ba [ 1710.173072][ C1] sd 0:0:1:0: tag#6915 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1710.182182][ C1] sd 0:0:1:0: tag#6915 CDB[20]: ba 03:15:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r2, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1712.329201][ C1] sd 0:0:1:0: tag#7125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1712.339111][ C1] sd 0:0:1:0: tag#7125 CDB: opcode=0xe5 (vendor) [ 1712.345442][ C1] sd 0:0:1:0: tag#7125 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1712.354518][ C1] sd 0:0:1:0: tag#7125 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1712.363645][ C1] sd 0:0:1:0: tag#7125 CDB[20]: ba 03:15:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1714.514937][ C0] sd 0:0:1:0: tag#7116 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1714.524802][ C0] sd 0:0:1:0: tag#7116 CDB: opcode=0xe5 (vendor) [ 1714.531151][ C0] sd 0:0:1:0: tag#7116 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1714.540219][ C0] sd 0:0:1:0: tag#7116 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1714.549269][ C0] sd 0:0:1:0: tag#7116 CDB[20]: ba 03:15:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1714.602591][ C1] sd 0:0:1:0: tag#7104 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1714.612562][ C1] sd 0:0:1:0: tag#7104 CDB: opcode=0xe5 (vendor) [ 1714.618936][ C1] sd 0:0:1:0: tag#7104 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1714.628090][ C1] sd 0:0:1:0: tag#7104 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1714.637257][ C1] sd 0:0:1:0: tag#7104 CDB[20]: ba 03:15:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r2, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1718.378752][ C1] sd 0:0:1:0: tag#7141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1718.388626][ C1] sd 0:0:1:0: tag#7141 CDB: opcode=0xe5 (vendor) [ 1718.394949][ C1] sd 0:0:1:0: tag#7141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1718.403989][ C1] sd 0:0:1:0: tag#7141 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1718.413029][ C1] sd 0:0:1:0: tag#7141 CDB[20]: ba 03:15:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1722.166958][ C1] sd 0:0:1:0: tag#7203 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1722.176922][ C1] sd 0:0:1:0: tag#7203 CDB: opcode=0xe5 (vendor) [ 1722.183328][ C1] sd 0:0:1:0: tag#7203 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1722.192420][ C1] sd 0:0:1:0: tag#7203 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1722.201470][ C1] sd 0:0:1:0: tag#7203 CDB[20]: ba 03:15:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1722.355599][ C0] sd 0:0:1:0: tag#7138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1722.365447][ C0] sd 0:0:1:0: tag#7138 CDB: opcode=0xe5 (vendor) [ 1722.371799][ C0] sd 0:0:1:0: tag#7138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1722.380833][ C0] sd 0:0:1:0: tag#7138 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1722.389891][ C0] sd 0:0:1:0: tag#7138 CDB[20]: ba 03:15:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1722.565806][ C1] sd 0:0:1:0: tag#7123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1722.575848][ C1] sd 0:0:1:0: tag#7123 CDB: opcode=0xe5 (vendor) [ 1722.582205][ C1] sd 0:0:1:0: tag#7123 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1722.591297][ C1] sd 0:0:1:0: tag#7123 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1722.600386][ C1] sd 0:0:1:0: tag#7123 CDB[20]: ba [ 1722.619821][ C0] sd 0:0:1:0: tag#7124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1722.629861][ C0] sd 0:0:1:0: tag#7124 CDB: opcode=0xe5 (vendor) [ 1722.636212][ C0] sd 0:0:1:0: tag#7124 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1722.645232][ C0] sd 0:0:1:0: tag#7124 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1722.654265][ C0] sd 0:0:1:0: tag#7124 CDB[20]: ba 03:15:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1725.165944][ C0] sd 0:0:1:0: tag#7218 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1725.175832][ C0] sd 0:0:1:0: tag#7218 CDB: opcode=0xe5 (vendor) [ 1725.182260][ C0] sd 0:0:1:0: tag#7218 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1725.191327][ C0] sd 0:0:1:0: tag#7218 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1725.200388][ C0] sd 0:0:1:0: tag#7218 CDB[20]: ba [ 1725.205563][ C0] sd 0:0:1:0: tag#7219 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1725.215419][ C0] sd 0:0:1:0: tag#7219 CDB: opcode=0xe5 (vendor) [ 1725.221790][ C0] sd 0:0:1:0: tag#7219 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1725.230907][ C0] sd 0:0:1:0: tag#7219 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1725.239937][ C0] sd 0:0:1:0: tag#7219 CDB[20]: ba [ 1726.185042][ C0] sd 0:0:1:0: tag#7222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1726.194903][ C0] sd 0:0:1:0: tag#7222 CDB: opcode=0xe5 (vendor) [ 1726.201320][ C0] sd 0:0:1:0: tag#7222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1726.210341][ C0] sd 0:0:1:0: tag#7222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1726.219461][ C0] sd 0:0:1:0: tag#7222 CDB[20]: ba 03:15:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1727.144715][ C1] sd 0:0:1:0: tag#7271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1727.154591][ C1] sd 0:0:1:0: tag#7271 CDB: opcode=0xe5 (vendor) [ 1727.160950][ C1] sd 0:0:1:0: tag#7271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1727.170000][ C1] sd 0:0:1:0: tag#7271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1727.179152][ C1] sd 0:0:1:0: tag#7271 CDB[20]: ba [ 1728.243922][ C0] sd 0:0:1:0: tag#7168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1728.253799][ C0] sd 0:0:1:0: tag#7168 CDB: opcode=0xe5 (vendor) [ 1728.260160][ C0] sd 0:0:1:0: tag#7168 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1728.269212][ C0] sd 0:0:1:0: tag#7168 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1728.278263][ C0] sd 0:0:1:0: tag#7168 CDB[20]: ba 03:15:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:15:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1730.580154][ C0] sd 0:0:1:0: tag#7169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1730.590004][ C0] sd 0:0:1:0: tag#7169 CDB: opcode=0xe5 (vendor) [ 1730.596349][ C0] sd 0:0:1:0: tag#7169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1730.605378][ C0] sd 0:0:1:0: tag#7169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1730.614418][ C0] sd 0:0:1:0: tag#7169 CDB[20]: ba [ 1730.788044][ C0] sd 0:0:1:0: tag#7170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1730.797906][ C0] sd 0:0:1:0: tag#7170 CDB: opcode=0xe5 (vendor) [ 1730.804353][ C0] sd 0:0:1:0: tag#7170 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1730.813413][ C0] sd 0:0:1:0: tag#7170 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1730.822456][ C0] sd 0:0:1:0: tag#7170 CDB[20]: ba 03:16:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1730.956980][ C0] sd 0:0:1:0: tag#7172 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1730.966842][ C0] sd 0:0:1:0: tag#7172 CDB: opcode=0xe5 (vendor) [ 1730.973189][ C0] sd 0:0:1:0: tag#7172 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1730.982242][ C0] sd 0:0:1:0: tag#7172 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1730.991317][ C0] sd 0:0:1:0: tag#7172 CDB[20]: ba [ 1731.034574][ C1] sd 0:0:1:0: tag#7633 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1731.044602][ C1] sd 0:0:1:0: tag#7633 CDB: opcode=0xe5 (vendor) [ 1731.050975][ C1] sd 0:0:1:0: tag#7633 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1731.060057][ C1] sd 0:0:1:0: tag#7633 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1731.069122][ C1] sd 0:0:1:0: tag#7633 CDB[20]: ba 03:16:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1734.170536][ C1] sd 0:0:1:0: tag#7495 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1734.180430][ C1] sd 0:0:1:0: tag#7495 CDB: opcode=0xe5 (vendor) [ 1734.186790][ C1] sd 0:0:1:0: tag#7495 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1734.195834][ C1] sd 0:0:1:0: tag#7495 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1734.204861][ C1] sd 0:0:1:0: tag#7495 CDB[20]: ba 03:16:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1734.216151][ C0] sd 0:0:1:0: tag#7496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1734.226032][ C0] sd 0:0:1:0: tag#7496 CDB: opcode=0xe5 (vendor) [ 1734.232370][ C0] sd 0:0:1:0: tag#7496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1734.241432][ C0] sd 0:0:1:0: tag#7496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1734.250659][ C0] sd 0:0:1:0: tag#7496 CDB[20]: ba 03:16:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1736.413977][ C0] sd 0:0:1:0: tag#7488 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.423928][ C0] sd 0:0:1:0: tag#7488 CDB: opcode=0xe5 (vendor) [ 1736.430291][ C0] sd 0:0:1:0: tag#7488 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.439326][ C0] sd 0:0:1:0: tag#7488 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.448361][ C0] sd 0:0:1:0: tag#7488 CDB[20]: ba [ 1736.451280][ C1] sd 0:0:1:0: tag#7489 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.463285][ C1] sd 0:0:1:0: tag#7489 CDB: opcode=0xe5 (vendor) [ 1736.469651][ C1] sd 0:0:1:0: tag#7489 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.478691][ C1] sd 0:0:1:0: tag#7489 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.487763][ C1] sd 0:0:1:0: tag#7489 CDB[20]: ba 03:16:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1739.215758][ C0] sd 0:0:1:0: tag#7519 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1739.225626][ C0] sd 0:0:1:0: tag#7519 CDB: opcode=0xe5 (vendor) [ 1739.232000][ C0] sd 0:0:1:0: tag#7519 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1739.241087][ C0] sd 0:0:1:0: tag#7519 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1739.250152][ C0] sd 0:0:1:0: tag#7519 CDB[20]: ba [ 1739.296415][ C0] sd 0:0:1:0: tag#7525 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1739.306272][ C0] sd 0:0:1:0: tag#7525 CDB: opcode=0xe5 (vendor) [ 1739.312620][ C0] sd 0:0:1:0: tag#7525 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1739.321688][ C0] sd 0:0:1:0: tag#7525 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1739.330732][ C0] sd 0:0:1:0: tag#7525 CDB[20]: ba 03:16:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1740.958896][ C1] sd 0:0:1:0: tag#7491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1740.968775][ C1] sd 0:0:1:0: tag#7491 CDB: opcode=0xe5 (vendor) [ 1740.975132][ C1] sd 0:0:1:0: tag#7491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1740.984220][ C1] sd 0:0:1:0: tag#7491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1740.993289][ C1] sd 0:0:1:0: tag#7491 CDB[20]: ba [ 1741.002856][ C1] sd 0:0:1:0: tag#7491 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1741.012739][ C1] sd 0:0:1:0: tag#7491 CDB: opcode=0xe5 (vendor) [ 1741.019148][ C1] sd 0:0:1:0: tag#7491 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1741.028381][ C1] sd 0:0:1:0: tag#7491 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1741.037544][ C1] sd 0:0:1:0: tag#7491 CDB[20]: ba 03:16:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1744.537857][ C0] sd 0:0:1:0: tag#7683 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1744.547715][ C0] sd 0:0:1:0: tag#7683 CDB: opcode=0xe5 (vendor) [ 1744.554048][ C0] sd 0:0:1:0: tag#7683 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1744.560343][ C1] sd 0:0:1:0: tag#7790 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1744.563098][ C0] sd 0:0:1:0: tag#7683 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1744.573015][ C1] sd 0:0:1:0: tag#7790 CDB: opcode=0xe5 (vendor) [ 1744.581989][ C0] sd 0:0:1:0: tag#7683 CDB[20]: ba [ 1744.593475][ C1] sd 0:0:1:0: tag#7790 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1744.602667][ C1] sd 0:0:1:0: tag#7790 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1744.611767][ C1] sd 0:0:1:0: tag#7790 CDB[20]: ba 03:16:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1748.222825][ C1] sd 0:0:1:0: tag#7695 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1748.232723][ C1] sd 0:0:1:0: tag#7695 CDB: opcode=0xe5 (vendor) [ 1748.239170][ C1] sd 0:0:1:0: tag#7695 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1748.248216][ C1] sd 0:0:1:0: tag#7695 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1748.257270][ C1] sd 0:0:1:0: tag#7695 CDB[20]: ba 03:16:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1748.464614][ C1] sd 0:0:1:0: tag#7680 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1748.474479][ C1] sd 0:0:1:0: tag#7680 CDB: opcode=0xe5 (vendor) [ 1748.480936][ C1] sd 0:0:1:0: tag#7680 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1748.490072][ C1] sd 0:0:1:0: tag#7680 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1748.499159][ C1] sd 0:0:1:0: tag#7680 CDB[20]: ba 03:16:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1752.742666][ C0] sd 0:0:1:0: tag#7843 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1752.752644][ C0] sd 0:0:1:0: tag#7843 CDB: opcode=0xe5 (vendor) [ 1752.759002][ C0] sd 0:0:1:0: tag#7843 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1752.768037][ C0] sd 0:0:1:0: tag#7843 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1752.777183][ C0] sd 0:0:1:0: tag#7843 CDB[20]: ba [ 1752.799851][ C0] sd 0:0:1:0: tag#7844 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1752.809721][ C0] sd 0:0:1:0: tag#7844 CDB: opcode=0xe5 (vendor) [ 1752.816069][ C0] sd 0:0:1:0: tag#7844 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1752.825089][ C0] sd 0:0:1:0: tag#7844 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1752.834158][ C0] sd 0:0:1:0: tag#7844 CDB[20]: ba [ 1752.839327][ C0] sd 0:0:1:0: tag#7845 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1752.849153][ C0] sd 0:0:1:0: tag#7845 CDB: opcode=0xe5 (vendor) [ 1752.855488][ C0] sd 0:0:1:0: tag#7845 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1752.864529][ C0] sd 0:0:1:0: tag#7845 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1752.873592][ C0] sd 0:0:1:0: tag#7845 CDB[20]: ba 03:16:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1755.996898][ C0] sd 0:0:1:0: tag#7847 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1755.996963][ C1] sd 0:0:1:0: tag#7961 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1756.006740][ C0] sd 0:0:1:0: tag#7847 CDB: opcode=0xe5 (vendor) [ 1756.016553][ C1] sd 0:0:1:0: tag#7961 CDB: opcode=0xe5 (vendor) [ 1756.022843][ C0] sd 0:0:1:0: tag#7847 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1756.029157][ C1] sd 0:0:1:0: tag#7961 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1756.038155][ C0] sd 0:0:1:0: tag#7847 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1756.047161][ C1] sd 0:0:1:0: tag#7961 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1756.056180][ C0] sd 0:0:1:0: tag#7847 CDB[20]: ba [ 1756.065159][ C1] sd 0:0:1:0: tag#7961 CDB[20]: ba [ 1758.160737][ C0] sd 0:0:1:0: tag#7848 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1758.170595][ C0] sd 0:0:1:0: tag#7848 CDB: opcode=0xe5 (vendor) [ 1758.176994][ C0] sd 0:0:1:0: tag#7848 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1758.186037][ C0] sd 0:0:1:0: tag#7848 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1758.195070][ C0] sd 0:0:1:0: tag#7848 CDB[20]: ba 03:16:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1758.571074][ C0] sd 0:0:1:0: tag#7938 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1758.580994][ C0] sd 0:0:1:0: tag#7938 CDB: opcode=0xe5 (vendor) [ 1758.587344][ C0] sd 0:0:1:0: tag#7938 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1758.596483][ C0] sd 0:0:1:0: tag#7938 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1758.605507][ C0] sd 0:0:1:0: tag#7938 CDB[20]: ba [ 1758.638559][ C0] sd 0:0:1:0: tag#7939 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1758.648445][ C0] sd 0:0:1:0: tag#7939 CDB: opcode=0xe5 (vendor) [ 1758.654769][ C0] sd 0:0:1:0: tag#7939 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1758.663812][ C0] sd 0:0:1:0: tag#7939 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1758.672942][ C0] sd 0:0:1:0: tag#7939 CDB[20]: ba 03:16:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1758.821358][ C0] sd 0:0:1:0: tag#7941 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1758.831230][ C0] sd 0:0:1:0: tag#7941 CDB: opcode=0xe5 (vendor) [ 1758.837615][ C0] sd 0:0:1:0: tag#7941 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1758.846663][ C0] sd 0:0:1:0: tag#7941 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1758.855794][ C0] sd 0:0:1:0: tag#7941 CDB[20]: ba [ 1760.822271][ C1] sd 0:0:1:0: tag#8130 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1760.832294][ C1] sd 0:0:1:0: tag#8130 CDB: opcode=0xe5 (vendor) [ 1760.838690][ C1] sd 0:0:1:0: tag#8130 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1760.847791][ C1] sd 0:0:1:0: tag#8130 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1760.856932][ C1] sd 0:0:1:0: tag#8130 CDB[20]: ba [ 1760.973702][ C1] sd 0:0:1:0: tag#8001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1760.983630][ C1] sd 0:0:1:0: tag#8001 CDB: opcode=0xe5 (vendor) [ 1760.990023][ C1] sd 0:0:1:0: tag#8001 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1760.999088][ C1] sd 0:0:1:0: tag#8001 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1761.008163][ C1] sd 0:0:1:0: tag#8001 CDB[20]: ba [ 1761.202479][ C0] sd 0:0:1:0: tag#7969 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1761.212330][ C0] sd 0:0:1:0: tag#7969 CDB: opcode=0xe5 (vendor) [ 1761.218714][ C0] sd 0:0:1:0: tag#7969 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1761.227775][ C0] sd 0:0:1:0: tag#7969 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1761.236904][ C0] sd 0:0:1:0: tag#7969 CDB[20]: ba 03:16:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1761.393258][ C1] sd 0:0:1:0: tag#8058 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1761.403132][ C1] sd 0:0:1:0: tag#8058 CDB: opcode=0xe5 (vendor) [ 1761.409488][ C1] sd 0:0:1:0: tag#8058 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1761.418551][ C1] sd 0:0:1:0: tag#8058 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1761.427622][ C1] sd 0:0:1:0: tag#8058 CDB[20]: ba 03:16:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1761.485758][ C0] sd 0:0:1:0: tag#8013 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1761.495647][ C0] sd 0:0:1:0: tag#8013 CDB: opcode=0xe5 (vendor) [ 1761.502013][ C0] sd 0:0:1:0: tag#8013 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1761.511075][ C0] sd 0:0:1:0: tag#8013 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1761.520125][ C0] sd 0:0:1:0: tag#8013 CDB[20]: ba [ 1761.591670][ C1] sd 0:0:1:0: tag#8062 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1761.601726][ C1] sd 0:0:1:0: tag#8062 CDB: opcode=0xe5 (vendor) [ 1761.608096][ C1] sd 0:0:1:0: tag#8062 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1761.617149][ C1] sd 0:0:1:0: tag#8062 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1761.626183][ C1] sd 0:0:1:0: tag#8062 CDB[20]: ba 03:16:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1765.248460][ C1] sd 0:0:1:0: tag#8010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1765.258358][ C1] sd 0:0:1:0: tag#8010 CDB: opcode=0xe5 (vendor) [ 1765.264688][ C1] sd 0:0:1:0: tag#8010 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1765.273861][ C1] sd 0:0:1:0: tag#8010 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1765.282910][ C1] sd 0:0:1:0: tag#8010 CDB[20]: ba [ 1765.363062][ C1] sd 0:0:1:0: tag#8017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1765.372931][ C1] sd 0:0:1:0: tag#8017 CDB: opcode=0xe5 (vendor) [ 1765.379324][ C1] sd 0:0:1:0: tag#8017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1765.388402][ C1] sd 0:0:1:0: tag#8017 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1765.397458][ C1] sd 0:0:1:0: tag#8017 CDB[20]: ba [ 1765.402653][ C1] sd 0:0:1:0: tag#8018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1765.412498][ C1] sd 0:0:1:0: tag#8018 CDB: opcode=0xe5 (vendor) [ 1765.418857][ C1] sd 0:0:1:0: tag#8018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1765.427910][ C1] sd 0:0:1:0: tag#8018 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1765.437062][ C1] sd 0:0:1:0: tag#8018 CDB[20]: ba 03:16:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, &(0x7f0000000540)) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1767.712546][ C1] sd 0:0:1:0: tag#8054 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1767.722470][ C1] sd 0:0:1:0: tag#8054 CDB: opcode=0xe5 (vendor) [ 1767.728832][ C1] sd 0:0:1:0: tag#8054 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1767.737890][ C1] sd 0:0:1:0: tag#8054 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1767.746920][ C1] sd 0:0:1:0: tag#8054 CDB[20]: ba [ 1768.339637][ C1] sd 0:0:1:0: tag#8055 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1768.349522][ C1] sd 0:0:1:0: tag#8055 CDB: opcode=0xe5 (vendor) [ 1768.355879][ C1] sd 0:0:1:0: tag#8055 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1768.364911][ C1] sd 0:0:1:0: tag#8055 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1768.373990][ C1] sd 0:0:1:0: tag#8055 CDB[20]: ba [ 1768.379146][ C1] sd 0:0:1:0: tag#8056 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1768.388996][ C1] sd 0:0:1:0: tag#8056 CDB: opcode=0xe5 (vendor) [ 1768.395331][ C1] sd 0:0:1:0: tag#8056 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1768.404403][ C1] sd 0:0:1:0: tag#8056 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1768.413471][ C1] sd 0:0:1:0: tag#8056 CDB[20]: ba 03:16:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x0, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, &(0x7f0000000540)) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1770.366958][ C0] sd 0:0:1:0: tag#8032 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1770.376825][ C0] sd 0:0:1:0: tag#8032 CDB: opcode=0xe5 (vendor) [ 1770.383158][ C0] sd 0:0:1:0: tag#8032 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1770.392211][ C0] sd 0:0:1:0: tag#8032 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1770.401239][ C0] sd 0:0:1:0: tag#8032 CDB[20]: ba [ 1771.462620][ C1] sd 0:0:1:0: tag#8001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1771.472500][ C1] sd 0:0:1:0: tag#8001 CDB: opcode=0xe5 (vendor) [ 1771.478863][ C1] sd 0:0:1:0: tag#8001 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1771.487988][ C1] sd 0:0:1:0: tag#8001 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1771.497051][ C1] sd 0:0:1:0: tag#8001 CDB[20]: ba [ 1772.207405][ C0] sd 0:0:1:0: tag#8033 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1772.217285][ C0] sd 0:0:1:0: tag#8033 CDB: opcode=0xe5 (vendor) [ 1772.223727][ C0] sd 0:0:1:0: tag#8033 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1772.232872][ C0] sd 0:0:1:0: tag#8033 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1772.241925][ C0] sd 0:0:1:0: tag#8033 CDB[20]: ba [ 1773.904945][ C0] sd 0:0:1:0: tag#8019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1773.914803][ C0] sd 0:0:1:0: tag#8019 CDB: opcode=0xe5 (vendor) [ 1773.921161][ C0] sd 0:0:1:0: tag#8019 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1773.930205][ C0] sd 0:0:1:0: tag#8019 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1773.939255][ C0] sd 0:0:1:0: tag#8019 CDB[20]: ba 03:16:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, &(0x7f0000000540)) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1774.046238][ C1] sd 0:0:1:0: tag#30 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.051282][ C0] sd 0:0:1:0: tag#31 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.055915][ C1] sd 0:0:1:0: tag#30 CDB: opcode=0xe5 (vendor) [ 1774.055933][ C1] sd 0:0:1:0: tag#30 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.065546][ C0] sd 0:0:1:0: tag#31 CDB: opcode=0xe5 (vendor) [ 1774.071763][ C1] sd 0:0:1:0: tag#30 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.080597][ C0] sd 0:0:1:0: tag#31 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.086750][ C1] sd 0:0:1:0: tag#30 CDB[20]: ba [ 1774.095563][ C0] sd 0:0:1:0: tag#31 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.119083][ C0] sd 0:0:1:0: tag#31 CDB[20]: ba [ 1774.228766][ C0] sd 0:0:1:0: tag#32 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.238451][ C0] sd 0:0:1:0: tag#32 CDB: opcode=0xe5 (vendor) [ 1774.244606][ C0] sd 0:0:1:0: tag#32 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.253472][ C0] sd 0:0:1:0: tag#32 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.262325][ C0] sd 0:0:1:0: tag#32 CDB[20]: ba 03:16:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1774.502318][ C1] sd 0:0:1:0: tag#34 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.512134][ C1] sd 0:0:1:0: tag#34 CDB: opcode=0xe5 (vendor) [ 1774.518373][ C1] sd 0:0:1:0: tag#34 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.527234][ C1] sd 0:0:1:0: tag#34 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.536082][ C1] sd 0:0:1:0: tag#34 CDB[20]: ba [ 1774.552001][ C1] sd 0:0:1:0: tag#37 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.561698][ C1] sd 0:0:1:0: tag#37 CDB: opcode=0xe5 (vendor) [ 1774.567886][ C1] sd 0:0:1:0: tag#37 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.576759][ C1] sd 0:0:1:0: tag#37 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.585630][ C1] sd 0:0:1:0: tag#37 CDB[20]: ba 03:16:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x0, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1774.861955][ C0] sd 0:0:1:0: tag#51 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1774.871644][ C0] sd 0:0:1:0: tag#51 CDB: opcode=0xe5 (vendor) [ 1774.877842][ C0] sd 0:0:1:0: tag#51 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1774.886720][ C0] sd 0:0:1:0: tag#51 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1774.895580][ C0] sd 0:0:1:0: tag#51 CDB[20]: ba 03:16:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1777.168753][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 1777.168780][ C0] sd 0:0:1:0: tag#15 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1777.185315][ C0] sd 0:0:1:0: tag#15 CDB: opcode=0xe5 (vendor) [ 1777.191532][ C0] sd 0:0:1:0: tag#15 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1777.200426][ C0] sd 0:0:1:0: tag#15 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1777.209295][ C0] sd 0:0:1:0: tag#15 CDB[20]: ba [ 1777.281088][ C1] sd 0:0:1:0: tag#26 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1777.290784][ C1] sd 0:0:1:0: tag#26 CDB: opcode=0xe5 (vendor) [ 1777.296965][ C1] sd 0:0:1:0: tag#26 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1777.305826][ C1] sd 0:0:1:0: tag#26 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1777.314673][ C1] sd 0:0:1:0: tag#26 CDB[20]: ba 03:16:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1777.583312][ C0] sd 0:0:1:0: tag#36 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1777.593119][ C0] sd 0:0:1:0: tag#36 CDB: opcode=0xe5 (vendor) [ 1777.599296][ C0] sd 0:0:1:0: tag#36 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1777.608155][ C0] sd 0:0:1:0: tag#36 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1777.617015][ C0] sd 0:0:1:0: tag#36 CDB[20]: ba [ 1780.162994][ C0] sd 0:0:1:0: tag#13 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1780.172678][ C0] sd 0:0:1:0: tag#13 CDB: opcode=0xe5 (vendor) [ 1780.178875][ C0] sd 0:0:1:0: tag#13 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1780.187822][ C0] sd 0:0:1:0: tag#13 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1780.196685][ C0] sd 0:0:1:0: tag#13 CDB[20]: ba 03:16:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x0, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1781.223183][ C0] sd 0:0:1:0: tag#23 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1781.232897][ C0] sd 0:0:1:0: tag#23 CDB: opcode=0xe5 (vendor) [ 1781.239083][ C0] sd 0:0:1:0: tag#23 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1781.247968][ C0] sd 0:0:1:0: tag#23 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1781.256861][ C0] sd 0:0:1:0: tag#23 CDB[20]: ba [ 1781.320212][ C1] sd 0:0:1:0: tag#4 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1781.329845][ C1] sd 0:0:1:0: tag#4 CDB: opcode=0xe5 (vendor) [ 1781.336035][ C1] sd 0:0:1:0: tag#4 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1781.344827][ C1] sd 0:0:1:0: tag#4 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1781.353700][ C1] sd 0:0:1:0: tag#4 CDB[20]: ba 03:16:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1784.337122][ C0] sd 0:0:1:0: tag#82 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1784.347033][ C0] sd 0:0:1:0: tag#82 CDB: opcode=0xe5 (vendor) [ 1784.353190][ C0] sd 0:0:1:0: tag#82 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1784.362077][ C0] sd 0:0:1:0: tag#82 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1784.370947][ C0] sd 0:0:1:0: tag#82 CDB[20]: ba 03:16:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x0, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1784.429648][ C0] sd 0:0:1:0: tag#83 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1784.439344][ C0] sd 0:0:1:0: tag#83 CDB: opcode=0xe5 (vendor) [ 1784.445500][ C0] sd 0:0:1:0: tag#83 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1784.454372][ C0] sd 0:0:1:0: tag#83 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1784.463248][ C0] sd 0:0:1:0: tag#83 CDB[20]: ba [ 1784.651409][ C1] sd 0:0:1:0: tag#96 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1784.661098][ C1] sd 0:0:1:0: tag#96 CDB: opcode=0xe5 (vendor) [ 1784.667364][ C1] sd 0:0:1:0: tag#96 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1784.676252][ C1] sd 0:0:1:0: tag#96 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1784.685127][ C1] sd 0:0:1:0: tag#96 CDB[20]: ba 03:16:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1787.213906][ C0] sd 0:0:1:0: tag#91 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1787.223577][ C0] sd 0:0:1:0: tag#91 CDB: opcode=0xe5 (vendor) [ 1787.229751][ C0] sd 0:0:1:0: tag#91 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1787.238622][ C0] sd 0:0:1:0: tag#91 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1787.247485][ C0] sd 0:0:1:0: tag#91 CDB[20]: ba [ 1788.191932][ C1] sd 0:0:1:0: tag#92 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1788.201736][ C1] sd 0:0:1:0: tag#92 CDB: opcode=0xe5 (vendor) [ 1788.207949][ C1] sd 0:0:1:0: tag#92 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1788.216814][ C1] sd 0:0:1:0: tag#92 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1788.225669][ C1] sd 0:0:1:0: tag#92 CDB[20]: ba [ 1789.547330][ C0] sd 0:0:1:0: tag#263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1789.557187][ C0] sd 0:0:1:0: tag#263 CDB: opcode=0xe5 (vendor) [ 1789.563441][ C0] sd 0:0:1:0: tag#263 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1789.572414][ C0] sd 0:0:1:0: tag#263 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1789.581363][ C0] sd 0:0:1:0: tag#263 CDB[20]: ba 03:16:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:16:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1789.839086][ C0] sd 0:0:1:0: tag#67 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1789.847203][ C1] sd 0:0:1:0: tag#68 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1789.848839][ C0] sd 0:0:1:0: tag#67 CDB: opcode=0xe5 (vendor) [ 1789.859076][ C1] sd 0:0:1:0: tag#68 CDB: opcode=0xe5 (vendor) [ 1789.865196][ C0] sd 0:0:1:0: tag#67 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1789.871418][ C1] sd 0:0:1:0: tag#68 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1789.880274][ C0] sd 0:0:1:0: tag#67 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1789.889118][ C1] sd 0:0:1:0: tag#68 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1789.897973][ C0] sd 0:0:1:0: tag#67 CDB[20]: ba [ 1789.906807][ C1] sd 0:0:1:0: tag#68 CDB[20]: ba 03:17:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1792.249763][ C1] sd 0:0:1:0: tag#115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1792.259540][ C1] sd 0:0:1:0: tag#115 CDB: opcode=0xe5 (vendor) [ 1792.265829][ C1] sd 0:0:1:0: tag#115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1792.274763][ C1] sd 0:0:1:0: tag#115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1792.283923][ C1] sd 0:0:1:0: tag#115 CDB[20]: ba [ 1792.298357][ C1] sd 0:0:1:0: tag#120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1792.308123][ C1] sd 0:0:1:0: tag#120 CDB: opcode=0xe5 (vendor) [ 1792.314369][ C1] sd 0:0:1:0: tag#120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1792.323359][ C1] sd 0:0:1:0: tag#120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1792.332342][ C1] sd 0:0:1:0: tag#120 CDB[20]: ba 03:17:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1794.574109][ C1] sd 0:0:1:0: tag#87 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1794.583838][ C1] sd 0:0:1:0: tag#87 CDB: opcode=0xe5 (vendor) [ 1794.590021][ C1] sd 0:0:1:0: tag#87 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1794.599592][ C1] sd 0:0:1:0: tag#87 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1794.608457][ C1] sd 0:0:1:0: tag#87 CDB[20]: ba 03:17:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:06 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x0, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1797.742785][ C0] sd 0:0:1:0: tag#98 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1797.752558][ C0] sd 0:0:1:0: tag#98 CDB: opcode=0xe5 (vendor) [ 1797.758739][ C0] sd 0:0:1:0: tag#98 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1797.767609][ C0] sd 0:0:1:0: tag#98 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1797.776745][ C0] sd 0:0:1:0: tag#98 CDB[20]: ba [ 1799.208785][ C1] sd 0:0:1:0: tag#100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1799.211174][ C0] sd 0:0:1:0: tag#102 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1799.218584][ C1] sd 0:0:1:0: tag#100 CDB: opcode=0xe5 (vendor) [ 1799.228301][ C0] sd 0:0:1:0: tag#102 CDB: opcode=0xe5 (vendor) [ 1799.234527][ C1] sd 0:0:1:0: tag#100 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1799.240773][ C0] sd 0:0:1:0: tag#102 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1799.249703][ C1] sd 0:0:1:0: tag#100 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1799.258623][ C0] sd 0:0:1:0: tag#102 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1799.267661][ C1] sd 0:0:1:0: tag#100 CDB[20]: ba [ 1799.276675][ C0] sd 0:0:1:0: tag#102 CDB[20]: ba 03:17:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1801.162310][ C1] sd 0:0:1:0: tag#104 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1801.172082][ C1] sd 0:0:1:0: tag#104 CDB: opcode=0xe5 (vendor) [ 1801.178380][ C1] sd 0:0:1:0: tag#104 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1801.187521][ C1] sd 0:0:1:0: tag#104 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1801.196486][ C1] sd 0:0:1:0: tag#104 CDB[20]: ba [ 1801.243070][ C0] sd 0:0:1:0: tag#107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1801.252902][ C0] sd 0:0:1:0: tag#107 CDB: opcode=0xe5 (vendor) [ 1801.259179][ C0] sd 0:0:1:0: tag#107 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1801.268126][ C0] sd 0:0:1:0: tag#107 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1801.277072][ C0] sd 0:0:1:0: tag#107 CDB[20]: ba 03:17:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1801.409825][ C1] sd 0:0:1:0: tag#85 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1801.419658][ C1] sd 0:0:1:0: tag#85 CDB: opcode=0xe5 (vendor) [ 1801.425860][ C1] sd 0:0:1:0: tag#85 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1801.434918][ C1] sd 0:0:1:0: tag#85 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1801.443819][ C1] sd 0:0:1:0: tag#85 CDB[20]: ba [ 1803.166770][ C1] sd 0:0:1:0: tag#78 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1803.176480][ C1] sd 0:0:1:0: tag#78 CDB: opcode=0xe5 (vendor) [ 1803.182755][ C1] sd 0:0:1:0: tag#78 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1803.191754][ C1] sd 0:0:1:0: tag#78 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1803.200637][ C1] sd 0:0:1:0: tag#78 CDB[20]: ba 03:17:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1805.267742][ C1] sd 0:0:1:0: tag#67 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1805.277451][ C1] sd 0:0:1:0: tag#67 CDB: opcode=0xe5 (vendor) [ 1805.283631][ C1] sd 0:0:1:0: tag#67 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1805.292501][ C1] sd 0:0:1:0: tag#67 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1805.301561][ C1] sd 0:0:1:0: tag#67 CDB[20]: ba 03:17:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1808.161345][ C1] sd 0:0:1:0: tag#69 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1808.171057][ C1] sd 0:0:1:0: tag#69 CDB: opcode=0xe5 (vendor) [ 1808.177267][ C1] sd 0:0:1:0: tag#69 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1808.186139][ C1] sd 0:0:1:0: tag#69 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1808.194990][ C1] sd 0:0:1:0: tag#69 CDB[20]: ba 03:17:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1808.254968][ C0] sd 0:0:1:0: tag#100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1808.264746][ C0] sd 0:0:1:0: tag#100 CDB: opcode=0xe5 (vendor) [ 1808.271014][ C0] sd 0:0:1:0: tag#100 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1808.279981][ C0] sd 0:0:1:0: tag#100 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1808.288943][ C0] sd 0:0:1:0: tag#100 CDB[20]: ba 03:17:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1808.564648][ C0] sd 0:0:1:0: tag#119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1808.574597][ C0] sd 0:0:1:0: tag#119 CDB: opcode=0xe5 (vendor) [ 1808.580872][ C0] sd 0:0:1:0: tag#119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1808.589835][ C0] sd 0:0:1:0: tag#119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1808.598884][ C0] sd 0:0:1:0: tag#119 CDB[20]: ba 03:17:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1810.417026][ C1] sd 0:0:1:0: tag#88 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1810.426753][ C1] sd 0:0:1:0: tag#88 CDB: opcode=0xe5 (vendor) [ 1810.432914][ C1] sd 0:0:1:0: tag#88 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1810.441783][ C1] sd 0:0:1:0: tag#88 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1810.450644][ C1] sd 0:0:1:0: tag#88 CDB[20]: ba [ 1811.198192][ C0] sd 0:0:1:0: tag#120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s [ 1811.208014][ C0] sd 0:0:1:0: tag#120 CDB: opcode=0xe5 (vendor) [ 1811.214289][ C0] sd 0:0:1:0: tag#120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1811.223387][ C0] sd 0:0:1:0: tag#120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1811.232459][ C0] sd 0:0:1:0: tag#120 CDB[20]: ba [ 1812.215276][ C1] sd 0:0:1:0: tag#72 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1812.224988][ C1] sd 0:0:1:0: tag#72 CDB: opcode=0xe5 (vendor) [ 1812.231211][ C1] sd 0:0:1:0: tag#72 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1812.240347][ C1] sd 0:0:1:0: tag#72 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1812.249316][ C1] sd 0:0:1:0: tag#72 CDB[20]: ba 03:17:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x0, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1812.501513][ C0] sd 0:0:1:0: tag#135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1812.511385][ C0] sd 0:0:1:0: tag#135 CDB: opcode=0xe5 (vendor) [ 1812.517650][ C0] sd 0:0:1:0: tag#135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1812.526602][ C0] sd 0:0:1:0: tag#135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1812.535540][ C0] sd 0:0:1:0: tag#135 CDB[20]: ba [ 1812.633178][ C0] sd 0:0:1:0: tag#177 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1812.642919][ C0] sd 0:0:1:0: tag#177 CDB: opcode=0xe5 (vendor) [ 1812.649161][ C0] sd 0:0:1:0: tag#177 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1812.658126][ C0] sd 0:0:1:0: tag#177 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1812.667269][ C0] sd 0:0:1:0: tag#177 CDB[20]: ba 03:17:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1812.857225][ C1] sd 0:0:1:0: tag#184 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1812.867110][ C1] sd 0:0:1:0: tag#184 CDB: opcode=0xe5 (vendor) [ 1812.873559][ C1] sd 0:0:1:0: tag#184 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1812.882523][ C1] sd 0:0:1:0: tag#184 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1812.891478][ C1] sd 0:0:1:0: tag#184 CDB[20]: ba 03:17:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1813.048111][ C1] sd 0:0:1:0: tag#321 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1813.057913][ C1] sd 0:0:1:0: tag#321 CDB: opcode=0xe5 (vendor) [ 1813.064199][ C1] sd 0:0:1:0: tag#321 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1813.073220][ C1] sd 0:0:1:0: tag#321 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1813.082330][ C1] sd 0:0:1:0: tag#321 CDB[20]: ba 03:17:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1817.228963][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1817.228995][ C0] sd 0:0:1:0: tag#466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1817.245414][ C0] sd 0:0:1:0: tag#466 CDB: opcode=0xe5 (vendor) [ 1817.251694][ C0] sd 0:0:1:0: tag#466 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1817.260664][ C0] sd 0:0:1:0: tag#466 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1817.269916][ C0] sd 0:0:1:0: tag#466 CDB[20]: ba 03:17:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1817.333139][ C0] sd 0:0:1:0: tag#467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1817.343061][ C0] sd 0:0:1:0: tag#467 CDB: opcode=0xe5 (vendor) [ 1817.349341][ C0] sd 0:0:1:0: tag#467 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1817.358302][ C0] sd 0:0:1:0: tag#467 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1817.367274][ C0] sd 0:0:1:0: tag#467 CDB[20]: ba 03:17:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1818.122159][ C1] sd 0:0:1:0: tag#467 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1818.131985][ C1] sd 0:0:1:0: tag#467 CDB: opcode=0xe5 (vendor) [ 1818.138272][ C1] sd 0:0:1:0: tag#467 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1818.147229][ C1] sd 0:0:1:0: tag#467 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1818.156205][ C1] sd 0:0:1:0: tag#467 CDB[20]: ba [ 1818.162882][ C0] sd 0:0:1:0: tag#469 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1818.172666][ C0] sd 0:0:1:0: tag#469 CDB: opcode=0xe5 (vendor) [ 1818.178975][ C0] sd 0:0:1:0: tag#469 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1818.187949][ C0] sd 0:0:1:0: tag#469 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1818.196928][ C0] sd 0:0:1:0: tag#469 CDB[20]: ba [ 1818.375494][ C1] sd 0:0:1:0: tag#510 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1818.385276][ C1] sd 0:0:1:0: tag#510 CDB: opcode=0xe5 (vendor) [ 1818.391561][ C1] sd 0:0:1:0: tag#510 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1818.400618][ C1] sd 0:0:1:0: tag#510 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1818.409565][ C1] sd 0:0:1:0: tag#510 CDB[20]: ba 03:17:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x0, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1820.490129][ C1] sd 0:0:1:0: tag#496 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1820.499907][ C1] sd 0:0:1:0: tag#496 CDB: opcode=0xe5 (vendor) [ 1820.506174][ C1] sd 0:0:1:0: tag#496 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1820.515109][ C1] sd 0:0:1:0: tag#496 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1820.524072][ C1] sd 0:0:1:0: tag#496 CDB[20]: ba 03:17:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1820.599492][ C1] sd 0:0:1:0: tag#498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1820.609376][ C1] sd 0:0:1:0: tag#498 CDB: opcode=0xe5 (vendor) [ 1820.615620][ C1] sd 0:0:1:0: tag#498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1820.624670][ C1] sd 0:0:1:0: tag#498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1820.633640][ C1] sd 0:0:1:0: tag#498 CDB[20]: ba 03:17:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1822.370842][ C0] sd 0:0:1:0: tag#455 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1822.380623][ C0] sd 0:0:1:0: tag#455 CDB: opcode=0xe5 (vendor) [ 1822.386898][ C0] sd 0:0:1:0: tag#455 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1822.395842][ C0] sd 0:0:1:0: tag#455 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1822.404812][ C0] sd 0:0:1:0: tag#455 CDB[20]: ba [ 1822.429459][ C0] sd 0:0:1:0: tag#465 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1822.439243][ C0] sd 0:0:1:0: tag#465 CDB: opcode=0xe5 (vendor) [ 1822.445498][ C0] sd 0:0:1:0: tag#465 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1822.454462][ C0] sd 0:0:1:0: tag#465 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1822.463417][ C0] sd 0:0:1:0: tag#465 CDB[20]: ba [ 1822.525752][ C0] sd 0:0:1:0: tag#466 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1822.535512][ C0] sd 0:0:1:0: tag#466 CDB: opcode=0xe5 (vendor) [ 1822.541792][ C0] sd 0:0:1:0: tag#466 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1822.550751][ C0] sd 0:0:1:0: tag#466 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1822.559956][ C0] sd 0:0:1:0: tag#466 CDB[20]: ba 03:17:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x0, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1822.806548][ C0] sd 0:0:1:0: tag#473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1822.816422][ C0] sd 0:0:1:0: tag#473 CDB: opcode=0xe5 (vendor) [ 1822.822667][ C0] sd 0:0:1:0: tag#473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1822.831624][ C0] sd 0:0:1:0: tag#473 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1822.840592][ C0] sd 0:0:1:0: tag#473 CDB[20]: ba 03:17:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x0, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1824.161437][ C0] sd 0:0:1:0: tag#475 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1824.171209][ C0] sd 0:0:1:0: tag#475 CDB: opcode=0xe5 (vendor) [ 1824.177475][ C0] sd 0:0:1:0: tag#475 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1824.186447][ C0] sd 0:0:1:0: tag#475 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1824.195380][ C0] sd 0:0:1:0: tag#475 CDB[20]: ba [ 1824.907313][ C1] sd 0:0:1:0: tag#482 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1824.917108][ C1] sd 0:0:1:0: tag#482 CDB: opcode=0xe5 (vendor) [ 1824.923373][ C1] sd 0:0:1:0: tag#482 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1824.932329][ C1] sd 0:0:1:0: tag#482 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1824.941365][ C1] sd 0:0:1:0: tag#482 CDB[20]: ba [ 1825.223673][ C0] sd 0:0:1:0: tag#483 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1825.233434][ C0] sd 0:0:1:0: tag#483 CDB: opcode=0xe5 (vendor) [ 1825.239710][ C0] sd 0:0:1:0: tag#483 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1825.248658][ C0] sd 0:0:1:0: tag#483 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1825.257618][ C0] sd 0:0:1:0: tag#483 CDB[20]: ba [ 1827.240561][ C0] sd 0:0:1:0: tag#497 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1827.250343][ C0] sd 0:0:1:0: tag#497 CDB: opcode=0xe5 (vendor) [ 1827.256635][ C0] sd 0:0:1:0: tag#497 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1827.265656][ C0] sd 0:0:1:0: tag#497 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1827.274619][ C0] sd 0:0:1:0: tag#497 CDB[20]: ba 03:17:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1829.493597][ C1] sd 0:0:1:0: tag#546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1829.503500][ C1] sd 0:0:1:0: tag#546 CDB: opcode=0xe5 (vendor) [ 1829.509797][ C1] sd 0:0:1:0: tag#546 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1829.518822][ C1] sd 0:0:1:0: tag#546 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1829.527810][ C1] sd 0:0:1:0: tag#546 CDB[20]: ba 03:17:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1830.060493][ C1] sd 0:0:1:0: tag#569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1830.070288][ C1] sd 0:0:1:0: tag#569 CDB: opcode=0xe5 (vendor) [ 1830.076591][ C1] sd 0:0:1:0: tag#569 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1830.085547][ C1] sd 0:0:1:0: tag#569 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1830.094514][ C1] sd 0:0:1:0: tag#569 CDB[20]: ba [ 1830.463674][ C0] sd 0:0:1:0: tag#673 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1830.473426][ C0] sd 0:0:1:0: tag#673 CDB: opcode=0xe5 (vendor) [ 1830.479665][ C0] sd 0:0:1:0: tag#673 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1830.488602][ C0] sd 0:0:1:0: tag#673 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1830.497537][ C0] sd 0:0:1:0: tag#673 CDB[20]: ba 03:17:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x0, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1834.419494][ C0] sd 0:0:1:0: tag#710 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1834.429280][ C0] sd 0:0:1:0: tag#710 CDB: opcode=0xe5 (vendor) [ 1834.435548][ C0] sd 0:0:1:0: tag#710 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1834.444592][ C0] sd 0:0:1:0: tag#710 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1834.453569][ C0] sd 0:0:1:0: tag#710 CDB[20]: ba 03:17:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x0, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1834.745292][ C0] sd 0:0:1:0: tag#641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1834.755088][ C0] sd 0:0:1:0: tag#641 CDB: opcode=0xe5 (vendor) [ 1834.761531][ C0] sd 0:0:1:0: tag#641 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1834.762289][ C1] sd 0:0:1:0: tag#685 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1834.770498][ C0] sd 0:0:1:0: tag#641 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1834.770514][ C0] sd 0:0:1:0: tag#641 CDB[20]: ba [ 1834.794569][ C1] sd 0:0:1:0: tag#685 CDB: opcode=0xe5 (vendor) [ 1834.800864][ C1] sd 0:0:1:0: tag#685 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1834.809956][ C1] sd 0:0:1:0: tag#685 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1834.818972][ C1] sd 0:0:1:0: tag#685 CDB[20]: ba 03:17:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x0, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1838.331917][ C1] sd 0:0:1:0: tag#935 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1838.341719][ C1] sd 0:0:1:0: tag#935 CDB: opcode=0xe5 (vendor) [ 1838.347986][ C1] sd 0:0:1:0: tag#935 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1838.356953][ C1] sd 0:0:1:0: tag#935 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1838.365902][ C1] sd 0:0:1:0: tag#935 CDB[20]: ba [ 1838.584841][ C0] sd 0:0:1:0: tag#942 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1838.594613][ C0] sd 0:0:1:0: tag#942 CDB: opcode=0xe5 (vendor) [ 1838.600897][ C0] sd 0:0:1:0: tag#942 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1838.609868][ C0] sd 0:0:1:0: tag#942 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1838.618851][ C0] sd 0:0:1:0: tag#942 CDB[20]: ba 03:17:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1840.807063][ C0] sd 0:0:1:0: tag#898 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1840.816858][ C0] sd 0:0:1:0: tag#898 CDB: opcode=0xe5 (vendor) [ 1840.823121][ C0] sd 0:0:1:0: tag#898 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1840.832095][ C0] sd 0:0:1:0: tag#898 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1840.841047][ C0] sd 0:0:1:0: tag#898 CDB[20]: ba [ 1843.168000][ C0] sd 0:0:1:0: tag#905 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1843.177862][ C0] sd 0:0:1:0: tag#905 CDB: opcode=0xe5 (vendor) [ 1843.184110][ C0] sd 0:0:1:0: tag#905 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1843.193084][ C0] sd 0:0:1:0: tag#905 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1843.202148][ C0] sd 0:0:1:0: tag#905 CDB[20]: ba [ 1843.290756][ C0] sd 0:0:1:0: tag#899 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1843.300540][ C0] sd 0:0:1:0: tag#899 CDB: opcode=0xe5 (vendor) [ 1843.306830][ C0] sd 0:0:1:0: tag#899 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1843.315794][ C0] sd 0:0:1:0: tag#899 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1843.324757][ C0] sd 0:0:1:0: tag#899 CDB[20]: ba 03:17:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x0, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1843.551971][ C0] sd 0:0:1:0: tag#928 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1843.561760][ C0] sd 0:0:1:0: tag#928 CDB: opcode=0xe5 (vendor) [ 1843.568048][ C0] sd 0:0:1:0: tag#928 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1843.577024][ C0] sd 0:0:1:0: tag#928 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1843.586057][ C0] sd 0:0:1:0: tag#928 CDB[20]: ba 03:17:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x0, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1845.215145][ C1] sd 0:0:1:0: tag#955 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1845.224915][ C1] sd 0:0:1:0: tag#955 CDB: opcode=0xe5 (vendor) [ 1845.231169][ C1] sd 0:0:1:0: tag#955 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1845.240200][ C1] sd 0:0:1:0: tag#955 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1845.249159][ C1] sd 0:0:1:0: tag#955 CDB[20]: ba 03:17:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1847.803259][ C0] sd 0:0:1:0: tag#897 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1847.813173][ C0] sd 0:0:1:0: tag#897 CDB: opcode=0xe5 (vendor) [ 1847.819443][ C0] sd 0:0:1:0: tag#897 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1847.822066][ C1] sd 0:0:1:0: tag#1151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1847.828398][ C0] sd 0:0:1:0: tag#897 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1847.838181][ C1] sd 0:0:1:0: tag#1151 CDB: opcode=0xe5 (vendor) 03:17:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x0, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:17:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1847.847107][ C0] sd 0:0:1:0: tag#897 CDB[20]: ba [ 1847.853414][ C1] sd 0:0:1:0: tag#1151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1847.867452][ C1] sd 0:0:1:0: tag#1151 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1847.876528][ C1] sd 0:0:1:0: tag#1151 CDB[20]: ba 03:17:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x0, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1851.396716][ C1] sd 0:0:1:0: tag#1113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1851.405218][ C0] sd 0:0:1:0: tag#1114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1851.406560][ C1] sd 0:0:1:0: tag#1113 CDB: opcode=0xe5 (vendor) [ 1851.416368][ C0] sd 0:0:1:0: tag#1114 CDB: opcode=0xe5 (vendor) [ 1851.422661][ C1] sd 0:0:1:0: tag#1113 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1851.422689][ C1] sd 0:0:1:0: tag#1113 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1851.429017][ C0] sd 0:0:1:0: tag#1114 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1851.438001][ C1] sd 0:0:1:0: tag#1113 CDB[20]: ba [ 1851.461128][ C0] sd 0:0:1:0: tag#1114 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1851.470170][ C0] sd 0:0:1:0: tag#1114 CDB[20]: ba 03:18:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x0, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1851.654936][ C1] sd 0:0:1:0: tag#1125 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1851.664832][ C1] sd 0:0:1:0: tag#1125 CDB: opcode=0xe5 (vendor) [ 1851.671173][ C1] sd 0:0:1:0: tag#1125 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1851.680241][ C1] sd 0:0:1:0: tag#1125 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1851.689381][ C1] sd 0:0:1:0: tag#1125 CDB[20]: ba 03:18:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x0, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1855.171839][ C1] sd 0:0:1:0: tag#1126 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1855.181959][ C1] sd 0:0:1:0: tag#1126 CDB: opcode=0xe5 (vendor) [ 1855.183872][ C0] sd 0:0:1:0: tag#1127 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1855.188310][ C1] sd 0:0:1:0: tag#1126 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1855.198113][ C0] sd 0:0:1:0: tag#1127 CDB: opcode=0xe5 (vendor) [ 1855.207113][ C1] sd 0:0:1:0: tag#1126 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1855.213410][ C0] sd 0:0:1:0: tag#1127 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1855.222438][ C1] sd 0:0:1:0: tag#1126 CDB[20]: ba [ 1855.231437][ C0] sd 0:0:1:0: tag#1127 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1855.245957][ C0] sd 0:0:1:0: tag#1127 CDB[20]: ba 03:18:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1859.274985][ C0] sd 0:0:1:0: tag#1149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1859.284876][ C0] sd 0:0:1:0: tag#1149 CDB: opcode=0xe5 (vendor) [ 1859.288643][ C1] sd 0:0:1:0: tag#1150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1859.291245][ C0] sd 0:0:1:0: tag#1149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1859.300990][ C1] sd 0:0:1:0: tag#1150 CDB: opcode=0xe5 (vendor) [ 1859.310080][ C0] sd 0:0:1:0: tag#1149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1859.316403][ C1] sd 0:0:1:0: tag#1150 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1859.325375][ C0] sd 0:0:1:0: tag#1149 CDB[20]: ba [ 1859.334377][ C1] sd 0:0:1:0: tag#1150 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1859.348481][ C1] sd 0:0:1:0: tag#1150 CDB[20]: ba 03:18:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1862.568403][ C1] sd 0:0:1:0: tag#1149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1862.578265][ C1] sd 0:0:1:0: tag#1149 CDB: opcode=0xe5 (vendor) [ 1862.584612][ C1] sd 0:0:1:0: tag#1149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1862.593686][ C1] sd 0:0:1:0: tag#1149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1862.603009][ C1] sd 0:0:1:0: tag#1149 CDB[20]: ba [ 1863.031672][ C1] sd 0:0:1:0: tag#1141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1863.041542][ C1] sd 0:0:1:0: tag#1141 CDB: opcode=0xe5 (vendor) [ 1863.047888][ C1] sd 0:0:1:0: tag#1141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1863.056949][ C1] sd 0:0:1:0: tag#1141 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1863.065975][ C1] sd 0:0:1:0: tag#1141 CDB[20]: ba 03:18:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1868.050716][ C1] sd 0:0:1:0: tag#1133 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1868.060765][ C1] sd 0:0:1:0: tag#1133 CDB: opcode=0xe5 (vendor) [ 1868.067112][ C1] sd 0:0:1:0: tag#1133 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1868.076142][ C1] sd 0:0:1:0: tag#1133 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1868.085159][ C1] sd 0:0:1:0: tag#1133 CDB[20]: ba 03:18:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1869.365249][ C0] sd 0:0:1:0: tag#1137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1869.375286][ C0] sd 0:0:1:0: tag#1137 CDB: opcode=0xe5 (vendor) [ 1869.381645][ C0] sd 0:0:1:0: tag#1137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1869.390750][ C0] sd 0:0:1:0: tag#1137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1869.399797][ C0] sd 0:0:1:0: tag#1137 CDB[20]: ba [ 1871.182748][ C0] sd 0:0:1:0: tag#1138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1871.192667][ C0] sd 0:0:1:0: tag#1138 CDB: opcode=0xe5 (vendor) [ 1871.198999][ C0] sd 0:0:1:0: tag#1138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1871.208022][ C0] sd 0:0:1:0: tag#1138 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1871.217064][ C0] sd 0:0:1:0: tag#1138 CDB[20]: ba [ 1871.462314][ C1] sd 0:0:1:0: tag#1139 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1871.472165][ C1] sd 0:0:1:0: tag#1139 CDB: opcode=0xe5 (vendor) [ 1871.478516][ C1] sd 0:0:1:0: tag#1139 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1871.487546][ C1] sd 0:0:1:0: tag#1139 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1871.496570][ C1] sd 0:0:1:0: tag#1139 CDB[20]: ba [ 1873.177501][ C0] sd 0:0:1:0: tag#1145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1873.187391][ C0] sd 0:0:1:0: tag#1145 CDB: opcode=0xe5 (vendor) [ 1873.193722][ C0] sd 0:0:1:0: tag#1145 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1873.202880][ C0] sd 0:0:1:0: tag#1145 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1873.211917][ C0] sd 0:0:1:0: tag#1145 CDB[20]: ba 03:18:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1873.321726][ C1] sd 0:0:1:0: tag#1146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1873.331586][ C1] sd 0:0:1:0: tag#1146 CDB: opcode=0xe5 (vendor) [ 1873.337962][ C1] sd 0:0:1:0: tag#1146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1873.347026][ C1] sd 0:0:1:0: tag#1146 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1873.356069][ C1] sd 0:0:1:0: tag#1146 CDB[20]: ba 03:18:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1876.097549][ C0] sd 0:0:1:0: tag#1100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1876.107949][ C0] sd 0:0:1:0: tag#1100 CDB: opcode=0xe5 (vendor) [ 1876.114292][ C0] sd 0:0:1:0: tag#1100 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1876.123366][ C0] sd 0:0:1:0: tag#1100 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1876.132421][ C0] sd 0:0:1:0: tag#1100 CDB[20]: ba 03:18:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x0, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1878.396055][ C1] sd 0:0:1:0: tag#1109 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1878.405916][ C1] sd 0:0:1:0: tag#1109 CDB: opcode=0xe5 (vendor) [ 1878.412250][ C1] sd 0:0:1:0: tag#1109 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1878.415134][ C0] sd 0:0:1:0: tag#1110 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1878.421296][ C1] sd 0:0:1:0: tag#1109 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1878.431121][ C0] sd 0:0:1:0: tag#1110 CDB: opcode=0xe5 (vendor) [ 1878.440104][ C1] sd 0:0:1:0: tag#1109 CDB[20]: ba [ 1878.451555][ C0] sd 0:0:1:0: tag#1110 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1878.460611][ C0] sd 0:0:1:0: tag#1110 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1878.469671][ C0] sd 0:0:1:0: tag#1110 CDB[20]: ba 03:18:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1882.230676][ C1] sd 0:0:1:0: tag#1132 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1882.240595][ C1] sd 0:0:1:0: tag#1132 CDB: opcode=0xe5 (vendor) [ 1882.246995][ C1] sd 0:0:1:0: tag#1132 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1882.256078][ C1] sd 0:0:1:0: tag#1132 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1882.265137][ C1] sd 0:0:1:0: tag#1132 CDB[20]: ba [ 1882.509838][ C0] sd 0:0:1:0: tag#1298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1882.519801][ C0] sd 0:0:1:0: tag#1298 CDB: opcode=0xe5 (vendor) [ 1882.526146][ C0] sd 0:0:1:0: tag#1298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1882.535164][ C0] sd 0:0:1:0: tag#1298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1882.544201][ C0] sd 0:0:1:0: tag#1298 CDB[20]: ba 03:18:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x0, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1885.530663][ C0] sd 0:0:1:0: tag#1106 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1885.540648][ C0] sd 0:0:1:0: tag#1106 CDB: opcode=0xe5 (vendor) [ 1885.547031][ C0] sd 0:0:1:0: tag#1106 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1885.556069][ C0] sd 0:0:1:0: tag#1106 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1885.565107][ C0] sd 0:0:1:0: tag#1106 CDB[20]: ba [ 1885.572145][ C0] sd 0:0:1:0: tag#1107 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1885.581994][ C0] sd 0:0:1:0: tag#1107 CDB: opcode=0xe5 (vendor) [ 1885.588353][ C0] sd 0:0:1:0: tag#1107 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1885.597399][ C0] sd 0:0:1:0: tag#1107 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1885.606443][ C0] sd 0:0:1:0: tag#1107 CDB[20]: ba 03:18:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x0, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1888.218317][ C1] sd 0:0:1:0: tag#1108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1888.228181][ C1] sd 0:0:1:0: tag#1108 CDB: opcode=0xe5 (vendor) [ 1888.234507][ C1] sd 0:0:1:0: tag#1108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1888.243555][ C1] sd 0:0:1:0: tag#1108 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1888.252685][ C1] sd 0:0:1:0: tag#1108 CDB[20]: ba [ 1889.347651][ C0] sd 0:0:1:0: tag#1118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1889.357518][ C0] sd 0:0:1:0: tag#1118 CDB: opcode=0xe5 (vendor) [ 1889.363857][ C0] sd 0:0:1:0: tag#1118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1889.372913][ C0] sd 0:0:1:0: tag#1118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1889.381949][ C0] sd 0:0:1:0: tag#1118 CDB[20]: ba 03:18:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1891.352322][ C1] sd 0:0:1:0: tag#1124 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1891.362180][ C1] sd 0:0:1:0: tag#1124 CDB: opcode=0xe5 (vendor) [ 1891.368527][ C1] sd 0:0:1:0: tag#1124 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1891.377571][ C1] sd 0:0:1:0: tag#1124 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1891.386603][ C1] sd 0:0:1:0: tag#1124 CDB[20]: ba 03:18:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x0, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1894.283143][ C0] sd 0:0:1:0: tag#1134 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1894.293020][ C0] sd 0:0:1:0: tag#1134 CDB: opcode=0xe5 (vendor) [ 1894.299402][ C0] sd 0:0:1:0: tag#1134 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1894.308449][ C0] sd 0:0:1:0: tag#1134 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1894.317486][ C0] sd 0:0:1:0: tag#1134 CDB[20]: ba [ 1895.221760][ C1] sd 0:0:1:0: tag#1139 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1895.231626][ C1] sd 0:0:1:0: tag#1139 CDB: opcode=0xe5 (vendor) [ 1895.237997][ C1] sd 0:0:1:0: tag#1139 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1895.247039][ C1] sd 0:0:1:0: tag#1139 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1895.256070][ C1] sd 0:0:1:0: tag#1139 CDB[20]: ba [ 1897.173810][ C1] sd 0:0:1:0: tag#1088 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1897.183682][ C1] sd 0:0:1:0: tag#1088 CDB: opcode=0xe5 (vendor) [ 1897.190070][ C1] sd 0:0:1:0: tag#1088 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1897.199112][ C1] sd 0:0:1:0: tag#1088 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1897.208275][ C1] sd 0:0:1:0: tag#1088 CDB[20]: ba 03:18:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1897.321351][ C1] sd 0:0:1:0: tag#1099 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1897.331315][ C1] sd 0:0:1:0: tag#1099 CDB: opcode=0xe5 (vendor) [ 1897.337665][ C1] sd 0:0:1:0: tag#1099 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1897.346725][ C1] sd 0:0:1:0: tag#1099 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1897.355770][ C1] sd 0:0:1:0: tag#1099 CDB[20]: ba [ 1897.378560][ C0] sd 0:0:1:0: tag#1100 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1897.388444][ C0] sd 0:0:1:0: tag#1100 CDB: opcode=0xe5 (vendor) [ 1897.394792][ C0] sd 0:0:1:0: tag#1100 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1897.403842][ C0] sd 0:0:1:0: tag#1100 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1897.412899][ C0] sd 0:0:1:0: tag#1100 CDB[20]: ba [ 1899.168021][ C1] sd 0:0:1:0: tag#1101 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1899.178042][ C1] sd 0:0:1:0: tag#1101 CDB: opcode=0xe5 (vendor) [ 1899.184367][ C1] sd 0:0:1:0: tag#1101 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1899.193425][ C1] sd 0:0:1:0: tag#1101 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1899.202432][ C1] sd 0:0:1:0: tag#1101 CDB[20]: ba 03:18:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1901.172949][ C1] sd 0:0:1:0: tag#1117 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1901.182852][ C1] sd 0:0:1:0: tag#1117 CDB: opcode=0xe5 (vendor) [ 1901.189257][ C1] sd 0:0:1:0: tag#1117 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1901.198300][ C1] sd 0:0:1:0: tag#1117 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1901.207345][ C1] sd 0:0:1:0: tag#1117 CDB[20]: ba 03:18:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1903.343116][ C1] sd 0:0:1:0: tag#1089 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1903.352975][ C1] sd 0:0:1:0: tag#1089 CDB: opcode=0xe5 (vendor) [ 1903.359335][ C1] sd 0:0:1:0: tag#1089 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1903.368389][ C1] sd 0:0:1:0: tag#1089 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1903.377457][ C1] sd 0:0:1:0: tag#1089 CDB[20]: ba [ 1903.441372][ C0] sd 0:0:1:0: tag#1284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1903.451236][ C0] sd 0:0:1:0: tag#1284 CDB: opcode=0xe5 (vendor) [ 1903.457602][ C0] sd 0:0:1:0: tag#1284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1903.466633][ C0] sd 0:0:1:0: tag#1284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1903.475651][ C0] sd 0:0:1:0: tag#1284 CDB[20]: ba 03:18:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x0, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:18:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x0, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1908.158841][ C0] sd 0:0:1:0: tag#1093 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1908.168701][ C0] sd 0:0:1:0: tag#1093 CDB: opcode=0xe5 (vendor) [ 1908.175032][ C0] sd 0:0:1:0: tag#1093 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1908.179658][ C1] sd 0:0:1:0: tag#1094 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1908.184077][ C0] sd 0:0:1:0: tag#1093 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1908.193881][ C1] sd 0:0:1:0: tag#1094 CDB: opcode=0xe5 (vendor) [ 1908.202888][ C0] sd 0:0:1:0: tag#1093 CDB[20]: ba [ 1908.209198][ C1] sd 0:0:1:0: tag#1094 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1908.223572][ C1] sd 0:0:1:0: tag#1094 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1908.232615][ C1] sd 0:0:1:0: tag#1094 CDB[20]: ba [ 1908.267214][ C0] sd 0:0:1:0: tag#1095 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1908.277075][ C0] sd 0:0:1:0: tag#1095 CDB: opcode=0xe5 (vendor) [ 1908.283442][ C0] sd 0:0:1:0: tag#1095 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1908.292514][ C0] sd 0:0:1:0: tag#1095 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1908.301603][ C0] sd 0:0:1:0: tag#1095 CDB[20]: ba 03:19:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1913.111552][ C1] sd 0:0:1:0: tag#1103 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1913.121521][ C1] sd 0:0:1:0: tag#1103 CDB: opcode=0xe5 (vendor) [ 1913.128003][ C1] sd 0:0:1:0: tag#1103 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1913.137036][ C1] sd 0:0:1:0: tag#1103 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1913.146100][ C1] sd 0:0:1:0: tag#1103 CDB[20]: ba 03:19:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) 03:19:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1913.681413][ C0] sd 0:0:1:0: tag#1340 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1913.691389][ C0] sd 0:0:1:0: tag#1340 CDB: opcode=0xe5 (vendor) [ 1913.697755][ C0] sd 0:0:1:0: tag#1340 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1913.706788][ C0] sd 0:0:1:0: tag#1340 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1913.715844][ C0] sd 0:0:1:0: tag#1340 CDB[20]: ba [ 1913.898096][ C0] sd 0:0:1:0: tag#1118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1913.907966][ C0] sd 0:0:1:0: tag#1118 CDB: opcode=0xe5 (vendor) [ 1913.914314][ C0] sd 0:0:1:0: tag#1118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1913.923343][ C0] sd 0:0:1:0: tag#1118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1913.932368][ C0] sd 0:0:1:0: tag#1118 CDB[20]: ba 03:19:03 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1914.640185][ C1] sd 0:0:1:0: tag#1377 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1914.650114][ C1] sd 0:0:1:0: tag#1377 CDB: opcode=0xe5 (vendor) [ 1914.656505][ C1] sd 0:0:1:0: tag#1377 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1914.665591][ C1] sd 0:0:1:0: tag#1377 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1914.674652][ C1] sd 0:0:1:0: tag#1377 CDB[20]: ba 03:19:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) [ 1914.916795][ C1] sd 0:0:1:0: tag#1405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1914.926734][ C1] sd 0:0:1:0: tag#1405 CDB: opcode=0xe5 (vendor) [ 1914.933181][ C1] sd 0:0:1:0: tag#1405 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1914.942412][ C1] sd 0:0:1:0: tag#1405 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1914.951597][ C1] sd 0:0:1:0: tag#1405 CDB[20]: ba 03:19:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x0, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1915.798077][ C1] sd 0:0:1:0: tag#1353 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1915.808083][ C1] sd 0:0:1:0: tag#1353 CDB: opcode=0xe5 (vendor) [ 1915.814424][ C1] sd 0:0:1:0: tag#1353 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1915.823500][ C1] sd 0:0:1:0: tag#1353 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1915.832637][ C1] sd 0:0:1:0: tag#1353 CDB[20]: ba [ 1915.875222][ C0] sd 0:0:1:0: tag#1399 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1915.885202][ C0] sd 0:0:1:0: tag#1399 CDB: opcode=0xe5 (vendor) [ 1915.891541][ C0] sd 0:0:1:0: tag#1399 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1915.900683][ C0] sd 0:0:1:0: tag#1399 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1915.909839][ C0] sd 0:0:1:0: tag#1399 CDB[20]: ba 03:19:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x0, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1916.023932][ C1] sd 0:0:1:0: tag#1358 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1916.033809][ C1] sd 0:0:1:0: tag#1358 CDB: opcode=0xe5 (vendor) [ 1916.040200][ C1] sd 0:0:1:0: tag#1358 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1916.049244][ C1] sd 0:0:1:0: tag#1358 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1916.058284][ C1] sd 0:0:1:0: tag#1358 CDB[20]: ba 03:19:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(0x0, 0x0) 03:19:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x0, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1919.176134][ C1] sd 0:0:1:0: tag#1358 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1919.186018][ C1] sd 0:0:1:0: tag#1358 CDB: opcode=0xe5 (vendor) [ 1919.192355][ C1] sd 0:0:1:0: tag#1358 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1919.201414][ C1] sd 0:0:1:0: tag#1358 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1919.210630][ C1] sd 0:0:1:0: tag#1358 CDB[20]: ba [ 1919.303594][ C1] sd 0:0:1:0: tag#1361 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1919.313504][ C1] sd 0:0:1:0: tag#1361 CDB: opcode=0xe5 (vendor) [ 1919.319877][ C1] sd 0:0:1:0: tag#1361 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1919.329324][ C1] sd 0:0:1:0: tag#1361 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1919.338391][ C1] sd 0:0:1:0: tag#1361 CDB[20]: ba [ 1919.554118][ C0] sd 0:0:1:0: tag#1383 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1919.563988][ C0] sd 0:0:1:0: tag#1383 CDB: opcode=0xe5 (vendor) [ 1919.570336][ C0] sd 0:0:1:0: tag#1383 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1919.579508][ C0] sd 0:0:1:0: tag#1383 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1919.588546][ C0] sd 0:0:1:0: tag#1383 CDB[20]: ba 03:19:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x0, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x0, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1922.211169][ C0] sd 0:0:1:0: tag#1408 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1922.221076][ C0] sd 0:0:1:0: tag#1408 CDB: opcode=0xe5 (vendor) [ 1922.227420][ C0] sd 0:0:1:0: tag#1408 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1922.236453][ C0] sd 0:0:1:0: tag#1408 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1922.245474][ C0] sd 0:0:1:0: tag#1408 CDB[20]: ba 03:19:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x0, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x0, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1925.325071][ C1] sd 0:0:1:0: tag#1608 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1925.334938][ C1] sd 0:0:1:0: tag#1608 CDB: opcode=0xe5 (vendor) [ 1925.341308][ C1] sd 0:0:1:0: tag#1608 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1925.350364][ C1] sd 0:0:1:0: tag#1608 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1925.359432][ C1] sd 0:0:1:0: tag#1608 CDB[20]: ba [ 1925.777210][ C0] sd 0:0:1:0: tag#1610 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1925.787100][ C0] sd 0:0:1:0: tag#1610 CDB: opcode=0xe5 (vendor) [ 1925.793428][ C0] sd 0:0:1:0: tag#1610 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1925.802503][ C0] sd 0:0:1:0: tag#1610 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1925.811555][ C0] sd 0:0:1:0: tag#1610 CDB[20]: ba 03:19:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1929.217027][ C0] sd 0:0:1:0: tag#1620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1929.226926][ C0] sd 0:0:1:0: tag#1620 CDB: opcode=0xe5 (vendor) [ 1929.233263][ C0] sd 0:0:1:0: tag#1620 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1929.242325][ C0] sd 0:0:1:0: tag#1620 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1929.251356][ C0] sd 0:0:1:0: tag#1620 CDB[20]: ba [ 1930.207898][ C0] sd 0:0:1:0: tag#1621 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1930.217753][ C0] sd 0:0:1:0: tag#1621 CDB: opcode=0xe5 (vendor) [ 1930.224098][ C0] sd 0:0:1:0: tag#1621 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1930.233145][ C0] sd 0:0:1:0: tag#1621 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1930.242175][ C0] sd 0:0:1:0: tag#1621 CDB[20]: ba 03:19:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x0, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1932.232746][ C1] sd 0:0:1:0: tag#1624 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1932.242640][ C1] sd 0:0:1:0: tag#1624 CDB: opcode=0xe5 (vendor) [ 1932.249020][ C1] sd 0:0:1:0: tag#1624 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1932.258060][ C1] sd 0:0:1:0: tag#1624 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1932.267109][ C1] sd 0:0:1:0: tag#1624 CDB[20]: ba 03:19:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1932.491115][ C0] sd 0:0:1:0: tag#1604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1932.500995][ C0] sd 0:0:1:0: tag#1604 CDB: opcode=0xe5 (vendor) [ 1932.507361][ C0] sd 0:0:1:0: tag#1604 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1932.516407][ C0] sd 0:0:1:0: tag#1604 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1932.525472][ C0] sd 0:0:1:0: tag#1604 CDB[20]: ba 03:19:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x0, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1935.215318][ C1] sd 0:0:1:0: tag#1619 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1935.225191][ C1] sd 0:0:1:0: tag#1619 CDB: opcode=0xe5 (vendor) [ 1935.231548][ C1] sd 0:0:1:0: tag#1619 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1935.240589][ C1] sd 0:0:1:0: tag#1619 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1935.249624][ C1] sd 0:0:1:0: tag#1619 CDB[20]: ba 03:19:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1938.168301][ C0] sd 0:0:1:0: tag#1620 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1938.178157][ C0] sd 0:0:1:0: tag#1620 CDB: opcode=0xe5 (vendor) [ 1938.184523][ C0] sd 0:0:1:0: tag#1620 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1938.193578][ C0] sd 0:0:1:0: tag#1620 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1938.202637][ C0] sd 0:0:1:0: tag#1620 CDB[20]: ba 03:19:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1942.166346][ C1] sd 0:0:1:0: tag#1603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1942.168778][ C0] sd 0:0:1:0: tag#1604 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1942.176299][ C1] sd 0:0:1:0: tag#1603 CDB: opcode=0xe5 (vendor) [ 1942.186077][ C0] sd 0:0:1:0: tag#1604 CDB: opcode=0xe5 (vendor) [ 1942.186106][ C0] sd 0:0:1:0: tag#1604 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1942.192426][ C1] sd 0:0:1:0: tag#1603 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1942.198740][ C0] sd 0:0:1:0: tag#1604 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1942.207785][ C1] sd 0:0:1:0: tag#1603 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1942.216851][ C0] sd 0:0:1:0: tag#1604 CDB[20]: ba [ 1942.240080][ C1] sd 0:0:1:0: tag#1603 CDB[20]: ba 03:19:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:33 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1944.167112][ C1] sd 0:0:1:0: tag#1918 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1944.176999][ C1] sd 0:0:1:0: tag#1918 CDB: opcode=0xe5 (vendor) [ 1944.183476][ C1] sd 0:0:1:0: tag#1918 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1944.192555][ C1] sd 0:0:1:0: tag#1918 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1944.201616][ C1] sd 0:0:1:0: tag#1918 CDB[20]: ba [ 1944.367240][ C0] sd 0:0:1:0: tag#1820 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1944.377096][ C0] sd 0:0:1:0: tag#1820 CDB: opcode=0xe5 (vendor) [ 1944.383427][ C0] sd 0:0:1:0: tag#1820 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1944.392482][ C0] sd 0:0:1:0: tag#1820 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1944.401528][ C0] sd 0:0:1:0: tag#1820 CDB[20]: ba 03:19:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x0, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1944.669552][ C0] sd 0:0:1:0: tag#1900 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1944.679490][ C0] sd 0:0:1:0: tag#1900 CDB: opcode=0xe5 (vendor) [ 1944.685832][ C0] sd 0:0:1:0: tag#1900 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1944.694838][ C0] sd 0:0:1:0: tag#1900 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1944.703891][ C0] sd 0:0:1:0: tag#1900 CDB[20]: ba 03:19:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1945.736458][ C1] sd 0:0:1:0: tag#2081 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1945.746337][ C1] sd 0:0:1:0: tag#2081 CDB: opcode=0xe5 (vendor) [ 1945.752683][ C1] sd 0:0:1:0: tag#2081 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1945.761764][ C1] sd 0:0:1:0: tag#2081 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1945.770834][ C1] sd 0:0:1:0: tag#2081 CDB[20]: ba [ 1945.795330][ C0] sd 0:0:1:0: tag#2004 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1945.805217][ C0] sd 0:0:1:0: tag#2004 CDB: opcode=0xe5 (vendor) [ 1945.811583][ C0] sd 0:0:1:0: tag#2004 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1945.820620][ C0] sd 0:0:1:0: tag#2004 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1945.829661][ C0] sd 0:0:1:0: tag#2004 CDB[20]: ba [ 1948.161194][ C0] sd 0:0:1:0: tag#2136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1948.171054][ C0] sd 0:0:1:0: tag#2136 CDB: opcode=0xe5 (vendor) [ 1948.177455][ C0] sd 0:0:1:0: tag#2136 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1948.186498][ C0] sd 0:0:1:0: tag#2136 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1948.195525][ C0] sd 0:0:1:0: tag#2136 CDB[20]: ba 03:19:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x0, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1950.782650][ C0] sd 0:0:1:0: tag#2120 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1950.792525][ C0] sd 0:0:1:0: tag#2120 CDB: opcode=0xe5 (vendor) [ 1950.798876][ C0] sd 0:0:1:0: tag#2120 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1950.808783][ C0] sd 0:0:1:0: tag#2120 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1950.817920][ C0] sd 0:0:1:0: tag#2120 CDB[20]: ba [ 1950.863711][ C1] sd 0:0:1:0: tag#2286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1950.864510][ C0] sd 0:0:1:0: tag#2121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1950.873599][ C1] sd 0:0:1:0: tag#2286 CDB: opcode=0xe5 (vendor) [ 1950.883360][ C0] sd 0:0:1:0: tag#2121 CDB: opcode=0xe5 (vendor) [ 1950.889683][ C1] sd 0:0:1:0: tag#2286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1950.895992][ C0] sd 0:0:1:0: tag#2121 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1950.904985][ C1] sd 0:0:1:0: tag#2286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1950.914015][ C0] sd 0:0:1:0: tag#2121 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1950.923016][ C1] sd 0:0:1:0: tag#2286 CDB[20]: ba [ 1950.932012][ C0] sd 0:0:1:0: tag#2121 CDB[20]: ba 03:19:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1953.320398][ C0] sd 0:0:1:0: tag#2132 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1953.330256][ C0] sd 0:0:1:0: tag#2132 CDB: opcode=0xe5 (vendor) [ 1953.336617][ C0] sd 0:0:1:0: tag#2132 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1953.345755][ C0] sd 0:0:1:0: tag#2132 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1953.354775][ C0] sd 0:0:1:0: tag#2132 CDB[20]: ba 03:19:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x0, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1958.215527][ C1] sd 0:0:1:0: tag#2172 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1958.225474][ C1] sd 0:0:1:0: tag#2172 CDB: opcode=0xe5 (vendor) [ 1958.231834][ C1] sd 0:0:1:0: tag#2172 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1958.240872][ C1] sd 0:0:1:0: tag#2172 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1958.249913][ C1] sd 0:0:1:0: tag#2172 CDB[20]: ba [ 1959.217658][ C0] sd 0:0:1:0: tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1959.227610][ C0] sd 0:0:1:0: tag#2135 CDB: opcode=0xe5 (vendor) [ 1959.233940][ C0] sd 0:0:1:0: tag#2135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1959.243011][ C0] sd 0:0:1:0: tag#2135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1959.252132][ C0] sd 0:0:1:0: tag#2135 CDB[20]: ba 03:19:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1960.475468][ C1] sd 0:0:1:0: tag#2164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1960.485360][ C1] sd 0:0:1:0: tag#2164 CDB: opcode=0xe5 (vendor) [ 1960.491744][ C1] sd 0:0:1:0: tag#2164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1960.500784][ C1] sd 0:0:1:0: tag#2164 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1960.509817][ C1] sd 0:0:1:0: tag#2164 CDB[20]: ba 03:19:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1961.483904][ C0] sd 0:0:1:0: tag#2170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1961.493762][ C0] sd 0:0:1:0: tag#2170 CDB: opcode=0xe5 (vendor) [ 1961.500103][ C0] sd 0:0:1:0: tag#2170 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1961.509116][ C0] sd 0:0:1:0: tag#2170 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1961.518150][ C0] sd 0:0:1:0: tag#2170 CDB[20]: ba 03:19:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x0, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1964.208248][ C1] sd 0:0:1:0: tag#2163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.218176][ C1] sd 0:0:1:0: tag#2163 CDB: opcode=0xe5 (vendor) [ 1964.224509][ C1] sd 0:0:1:0: tag#2163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.233543][ C1] sd 0:0:1:0: tag#2163 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1964.242564][ C1] sd 0:0:1:0: tag#2163 CDB[20]: ba [ 1964.249122][ C0] sd 0:0:1:0: tag#2166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1964.258990][ C0] sd 0:0:1:0: tag#2166 CDB: opcode=0xe5 (vendor) [ 1964.265331][ C0] sd 0:0:1:0: tag#2166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1964.274480][ C0] sd 0:0:1:0: tag#2166 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1964.283541][ C0] sd 0:0:1:0: tag#2166 CDB[20]: ba [ 1966.177252][ C1] sd 0:0:1:0: tag#2165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 1966.187118][ C1] sd 0:0:1:0: tag#2165 CDB: opcode=0xe5 (vendor) [ 1966.193900][ C1] sd 0:0:1:0: tag#2165 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1966.203047][ C1] sd 0:0:1:0: tag#2165 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1966.212313][ C1] sd 0:0:1:0: tag#2165 CDB[20]: ba 03:19:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x0, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:19:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1968.050098][ C0] sd 0:0:1:0: tag#2113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.059922][ C0] sd 0:0:1:0: tag#2113 CDB: opcode=0xe5 (vendor) [ 1968.066491][ C0] sd 0:0:1:0: tag#2113 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.075617][ C0] sd 0:0:1:0: tag#2113 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1968.084646][ C0] sd 0:0:1:0: tag#2113 CDB[20]: ba [ 1968.146362][ C1] sd 0:0:1:0: tag#2297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1968.156261][ C1] sd 0:0:1:0: tag#2297 CDB: opcode=0xe5 (vendor) [ 1968.162591][ C1] sd 0:0:1:0: tag#2297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1968.171664][ C1] sd 0:0:1:0: tag#2297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1968.180709][ C1] sd 0:0:1:0: tag#2297 CDB[20]: ba 03:19:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x0, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1970.168062][ C1] sd 0:0:1:0: tag#2299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1970.177971][ C1] sd 0:0:1:0: tag#2299 CDB: opcode=0xe5 (vendor) [ 1970.184324][ C1] sd 0:0:1:0: tag#2299 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1970.193392][ C1] sd 0:0:1:0: tag#2299 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1970.202432][ C1] sd 0:0:1:0: tag#2299 CDB[20]: ba 03:20:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1971.243471][ C0] sd 0:0:1:0: tag#2257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1971.253440][ C0] sd 0:0:1:0: tag#2257 CDB: opcode=0xe5 (vendor) [ 1971.259793][ C0] sd 0:0:1:0: tag#2257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1971.268845][ C0] sd 0:0:1:0: tag#2257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1971.277920][ C0] sd 0:0:1:0: tag#2257 CDB[20]: ba 03:20:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x0, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x0, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x0, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1971.564886][ C0] sd 0:0:1:0: tag#2282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1971.569224][ C1] sd 0:0:1:0: tag#2283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1971.574734][ C0] sd 0:0:1:0: tag#2282 CDB: opcode=0xe5 (vendor) [ 1971.584614][ C1] sd 0:0:1:0: tag#2283 CDB: opcode=0xe5 (vendor) [ 1971.590927][ C0] sd 0:0:1:0: tag#2282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1971.597272][ C1] sd 0:0:1:0: tag#2283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1971.606253][ C0] sd 0:0:1:0: tag#2282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1971.615259][ C1] sd 0:0:1:0: tag#2283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1971.624361][ C0] sd 0:0:1:0: tag#2282 CDB[20]: ba [ 1971.633369][ C1] sd 0:0:1:0: tag#2283 CDB[20]: ba 03:20:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1974.172475][ C0] sd 0:0:1:0: tag#2284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1974.182431][ C0] sd 0:0:1:0: tag#2284 CDB: opcode=0xe5 (vendor) [ 1974.188793][ C0] sd 0:0:1:0: tag#2284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1974.197852][ C0] sd 0:0:1:0: tag#2284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1974.207211][ C0] sd 0:0:1:0: tag#2284 CDB[20]: ba 03:20:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x0, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1976.524645][ C1] sd 0:0:1:0: tag#2247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1976.534513][ C1] sd 0:0:1:0: tag#2247 CDB: opcode=0xe5 (vendor) [ 1976.540957][ C1] sd 0:0:1:0: tag#2247 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1976.550020][ C1] sd 0:0:1:0: tag#2247 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1976.559092][ C1] sd 0:0:1:0: tag#2247 CDB[20]: ba 03:20:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1979.157313][ C1] sd 0:0:1:0: tag#2248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s [ 1979.167201][ C1] sd 0:0:1:0: tag#2248 CDB: opcode=0xe5 (vendor) [ 1979.173538][ C1] sd 0:0:1:0: tag#2248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1979.182592][ C1] sd 0:0:1:0: tag#2248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1979.191623][ C1] sd 0:0:1:0: tag#2248 CDB[20]: ba [ 1980.353144][ C1] sd 0:0:1:0: tag#2258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1980.363010][ C1] sd 0:0:1:0: tag#2258 CDB: opcode=0xe5 (vendor) [ 1980.369368][ C1] sd 0:0:1:0: tag#2258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1980.378429][ C1] sd 0:0:1:0: tag#2258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1980.387468][ C1] sd 0:0:1:0: tag#2258 CDB[20]: ba 03:20:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x0, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1982.368614][ C0] sd 0:0:1:0: tag#2511 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1982.374220][ C1] sd 0:0:1:0: tag#2512 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1982.378467][ C0] sd 0:0:1:0: tag#2511 CDB: opcode=0xe5 (vendor) [ 1982.388267][ C1] sd 0:0:1:0: tag#2512 CDB: opcode=0xe5 (vendor) [ 1982.394589][ C0] sd 0:0:1:0: tag#2511 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1982.400894][ C1] sd 0:0:1:0: tag#2512 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1982.409920][ C0] sd 0:0:1:0: tag#2511 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1982.418920][ C1] sd 0:0:1:0: tag#2512 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1982.427932][ C0] sd 0:0:1:0: tag#2511 CDB[20]: ba [ 1982.436946][ C1] sd 0:0:1:0: tag#2512 CDB[20]: ba [ 1985.196204][ C0] sd 0:0:1:0: tag#2517 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1985.206070][ C0] sd 0:0:1:0: tag#2517 CDB: opcode=0xe5 (vendor) [ 1985.212404][ C0] sd 0:0:1:0: tag#2517 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1985.221468][ C0] sd 0:0:1:0: tag#2517 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1985.230601][ C0] sd 0:0:1:0: tag#2517 CDB[20]: ba 03:20:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x0, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0x0, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x0, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1989.029213][ C1] sd 0:0:1:0: tag#2543 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1989.039074][ C1] sd 0:0:1:0: tag#2543 CDB: opcode=0xe5 (vendor) [ 1989.045433][ C1] sd 0:0:1:0: tag#2543 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1989.054473][ C1] sd 0:0:1:0: tag#2543 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1989.063527][ C1] sd 0:0:1:0: tag#2543 CDB[20]: ba [ 1989.898210][ C0] sd 0:0:1:0: tag#2678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1989.908065][ C0] sd 0:0:1:0: tag#2678 CDB: opcode=0xe5 (vendor) [ 1989.914395][ C0] sd 0:0:1:0: tag#2678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1989.923435][ C0] sd 0:0:1:0: tag#2678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1989.932495][ C0] sd 0:0:1:0: tag#2678 CDB[20]: ba [ 1990.050480][ C0] sd 0:0:1:0: tag#2514 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1990.060330][ C0] sd 0:0:1:0: tag#2514 CDB: opcode=0xe5 (vendor) [ 1990.066684][ C0] sd 0:0:1:0: tag#2514 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1990.075743][ C0] sd 0:0:1:0: tag#2514 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1990.084775][ C0] sd 0:0:1:0: tag#2514 CDB[20]: ba 03:20:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(0x0, 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1992.222068][ C0] sd 0:0:1:0: tag#2506 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1992.232110][ C0] sd 0:0:1:0: tag#2506 CDB: opcode=0xe5 (vendor) [ 1992.238466][ C0] sd 0:0:1:0: tag#2506 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1992.247592][ C0] sd 0:0:1:0: tag#2506 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1992.256634][ C0] sd 0:0:1:0: tag#2506 CDB[20]: ba 03:20:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x0, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x0, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x0, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0x0, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1992.567554][ C1] sd 0:0:1:0: tag#2546 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1992.577433][ C1] sd 0:0:1:0: tag#2546 CDB: opcode=0xe5 (vendor) [ 1992.583767][ C1] sd 0:0:1:0: tag#2546 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1992.592908][ C1] sd 0:0:1:0: tag#2546 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1992.601989][ C1] sd 0:0:1:0: tag#2546 CDB[20]: ba 03:20:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 1996.223694][ C0] sd 0:0:1:0: tag#2498 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1996.233563][ C0] sd 0:0:1:0: tag#2498 CDB: opcode=0xe5 (vendor) [ 1996.239924][ C0] sd 0:0:1:0: tag#2498 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1996.249084][ C0] sd 0:0:1:0: tag#2498 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1996.258144][ C0] sd 0:0:1:0: tag#2498 CDB[20]: ba [ 1996.373383][ C1] sd 0:0:1:0: tag#2505 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1996.383280][ C1] sd 0:0:1:0: tag#2505 CDB: opcode=0xe5 (vendor) [ 1996.389632][ C1] sd 0:0:1:0: tag#2505 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1996.398710][ C1] sd 0:0:1:0: tag#2505 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1996.407761][ C1] sd 0:0:1:0: tag#2505 CDB[20]: ba 03:20:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x0, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0x0, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2000.322339][ C1] sd 0:0:1:0: tag#2518 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2000.332247][ C1] sd 0:0:1:0: tag#2518 CDB: opcode=0xe5 (vendor) [ 2000.338643][ C1] sd 0:0:1:0: tag#2518 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2000.347840][ C1] sd 0:0:1:0: tag#2518 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2000.357739][ C1] sd 0:0:1:0: tag#2518 CDB[20]: ba 03:20:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0x0, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2003.181700][ C1] sd 0:0:1:0: tag#2535 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=2s [ 2003.191561][ C1] sd 0:0:1:0: tag#2535 CDB: opcode=0xe5 (vendor) [ 2003.197915][ C1] sd 0:0:1:0: tag#2535 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2003.206959][ C1] sd 0:0:1:0: tag#2535 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2003.216097][ C1] sd 0:0:1:0: tag#2535 CDB[20]: ba [ 2003.325696][ C0] sd 0:0:1:0: tag#2655 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2003.335546][ C0] sd 0:0:1:0: tag#2655 CDB: opcode=0xe5 (vendor) [ 2003.341898][ C0] sd 0:0:1:0: tag#2655 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2003.350968][ C0] sd 0:0:1:0: tag#2655 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2003.360108][ C0] sd 0:0:1:0: tag#2655 CDB[20]: ba 03:20:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2006.160204][ C0] sd 0:0:1:0: tag#2640 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2006.170076][ C0] sd 0:0:1:0: tag#2640 CDB: opcode=0xe5 (vendor) [ 2006.176434][ C0] sd 0:0:1:0: tag#2640 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2006.185469][ C0] sd 0:0:1:0: tag#2640 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2006.186134][ C1] sd 0:0:1:0: tag#2641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2006.194504][ C0] sd 0:0:1:0: tag#2640 CDB[20]: ba [ 2006.204290][ C1] sd 0:0:1:0: tag#2641 CDB: opcode=0xe5 (vendor) [ 2006.215737][ C1] sd 0:0:1:0: tag#2641 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2006.224759][ C1] sd 0:0:1:0: tag#2641 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2006.233797][ C1] sd 0:0:1:0: tag#2641 CDB[20]: ba 03:20:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2009.358600][ C0] sd 0:0:1:0: tag#2634 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2009.368548][ C0] sd 0:0:1:0: tag#2634 CDB: opcode=0xe5 (vendor) [ 2009.374882][ C0] sd 0:0:1:0: tag#2634 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2009.383957][ C0] sd 0:0:1:0: tag#2634 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2009.393016][ C0] sd 0:0:1:0: tag#2634 CDB[20]: ba 03:20:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x0, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2011.568305][ C1] sd 0:0:1:0: tag#2674 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2011.578186][ C1] sd 0:0:1:0: tag#2674 CDB: opcode=0xe5 (vendor) [ 2011.584515][ C1] sd 0:0:1:0: tag#2674 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2011.593571][ C1] sd 0:0:1:0: tag#2674 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2011.602781][ C1] sd 0:0:1:0: tag#2674 CDB[20]: ba [ 2011.746036][ C1] sd 0:0:1:0: tag#2675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2011.755928][ C1] sd 0:0:1:0: tag#2675 CDB: opcode=0xe5 (vendor) [ 2011.762288][ C1] sd 0:0:1:0: tag#2675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2011.771328][ C1] sd 0:0:1:0: tag#2675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2011.780367][ C1] sd 0:0:1:0: tag#2675 CDB[20]: ba 03:20:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x0, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2014.277586][ C0] sd 0:0:1:0: tag#2675 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2014.287582][ C0] sd 0:0:1:0: tag#2675 CDB: opcode=0xe5 (vendor) [ 2014.293914][ C0] sd 0:0:1:0: tag#2675 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2014.302964][ C0] sd 0:0:1:0: tag#2675 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2014.312007][ C0] sd 0:0:1:0: tag#2675 CDB[20]: ba 03:20:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2014.588512][ C0] sd 0:0:1:0: tag#2652 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2014.598465][ C0] sd 0:0:1:0: tag#2652 CDB: opcode=0xe5 (vendor) [ 2014.604808][ C0] sd 0:0:1:0: tag#2652 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2014.613860][ C0] sd 0:0:1:0: tag#2652 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2014.622929][ C0] sd 0:0:1:0: tag#2652 CDB[20]: ba 03:20:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(0x0, 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x0, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2018.807232][ C1] sd 0:0:1:0: tag#2663 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2018.817101][ C1] sd 0:0:1:0: tag#2663 CDB: opcode=0xe5 (vendor) [ 2018.823437][ C1] sd 0:0:1:0: tag#2663 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2018.828558][ C0] sd 0:0:1:0: tag#2664 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2018.832492][ C1] sd 0:0:1:0: tag#2663 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2018.842463][ C0] sd 0:0:1:0: tag#2664 CDB: opcode=0xe5 (vendor) [ 2018.851451][ C1] sd 0:0:1:0: tag#2663 CDB[20]: ba [ 2018.858147][ C0] sd 0:0:1:0: tag#2664 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2018.872247][ C0] sd 0:0:1:0: tag#2664 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2018.881291][ C0] sd 0:0:1:0: tag#2664 CDB[20]: ba [ 2020.156253][ C0] sd 0:0:1:0: tag#2666 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2020.166314][ C0] sd 0:0:1:0: tag#2666 CDB: opcode=0xe5 (vendor) [ 2020.172668][ C0] sd 0:0:1:0: tag#2666 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2020.181726][ C0] sd 0:0:1:0: tag#2666 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2020.190788][ C0] sd 0:0:1:0: tag#2666 CDB[20]: ba [ 2020.194301][ C1] sd 0:0:1:0: tag#2665 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2020.205801][ C1] sd 0:0:1:0: tag#2665 CDB: opcode=0xe5 (vendor) [ 2020.212153][ C1] sd 0:0:1:0: tag#2665 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2020.221208][ C1] sd 0:0:1:0: tag#2665 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2020.230263][ C1] sd 0:0:1:0: tag#2665 CDB[20]: ba 03:20:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2022.314528][ C1] sd 0:0:1:0: tag#2678 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2022.324404][ C1] sd 0:0:1:0: tag#2678 CDB: opcode=0xe5 (vendor) [ 2022.330800][ C1] sd 0:0:1:0: tag#2678 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2022.339925][ C1] sd 0:0:1:0: tag#2678 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2022.349057][ C1] sd 0:0:1:0: tag#2678 CDB[20]: ba 03:20:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2025.175759][ C1] sd 0:0:1:0: tag#2643 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2025.185598][ C1] sd 0:0:1:0: tag#2643 CDB: opcode=0xe5 (vendor) [ 2025.191980][ C1] sd 0:0:1:0: tag#2643 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2025.201019][ C1] sd 0:0:1:0: tag#2643 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2025.210076][ C1] sd 0:0:1:0: tag#2643 CDB[20]: ba [ 2026.172798][ C0] sd 0:0:1:0: tag#2646 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2026.174303][ C1] sd 0:0:1:0: tag#2648 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2026.182659][ C0] sd 0:0:1:0: tag#2646 CDB: opcode=0xe5 (vendor) [ 2026.192451][ C1] sd 0:0:1:0: tag#2648 CDB: opcode=0xe5 (vendor) [ 2026.199044][ C0] sd 0:0:1:0: tag#2646 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2026.199083][ C0] sd 0:0:1:0: tag#2646 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2026.205445][ C1] sd 0:0:1:0: tag#2648 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2026.214534][ C0] sd 0:0:1:0: tag#2646 CDB[20]: ba [ 2026.223559][ C1] sd 0:0:1:0: tag#2648 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2026.246994][ C1] sd 0:0:1:0: tag#2648 CDB[20]: ba 03:20:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x0, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x0, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:20:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0x0, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2029.335712][ C1] sd 0:0:1:0: tag#2698 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2029.345586][ C1] sd 0:0:1:0: tag#2698 CDB: opcode=0xe5 (vendor) [ 2029.351958][ C1] sd 0:0:1:0: tag#2698 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2029.361044][ C1] sd 0:0:1:0: tag#2698 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2029.370115][ C1] sd 0:0:1:0: tag#2698 CDB[20]: ba [ 2032.187163][ C0] sd 0:0:1:0: tag#2712 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2032.197006][ C0] sd 0:0:1:0: tag#2712 CDB: opcode=0xe5 (vendor) [ 2032.203353][ C0] sd 0:0:1:0: tag#2712 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2032.212568][ C0] sd 0:0:1:0: tag#2712 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2032.221698][ C0] sd 0:0:1:0: tag#2712 CDB[20]: ba [ 2032.323773][ C1] sd 0:0:1:0: tag#2688 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2032.333682][ C1] sd 0:0:1:0: tag#2688 CDB: opcode=0xe5 (vendor) [ 2032.340034][ C1] sd 0:0:1:0: tag#2688 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2032.349103][ C1] sd 0:0:1:0: tag#2688 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2032.358170][ C1] sd 0:0:1:0: tag#2688 CDB[20]: ba 03:21:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2034.464975][ C0] sd 0:0:1:0: tag#2691 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2034.474846][ C0] sd 0:0:1:0: tag#2691 CDB: opcode=0xe5 (vendor) [ 2034.481200][ C0] sd 0:0:1:0: tag#2691 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2034.490268][ C0] sd 0:0:1:0: tag#2691 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2034.499402][ C0] sd 0:0:1:0: tag#2691 CDB[20]: ba 03:21:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x0, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x0, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2034.843133][ C1] sd 0:0:1:0: tag#2739 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2034.853002][ C1] sd 0:0:1:0: tag#2739 CDB: opcode=0xe5 (vendor) [ 2034.859351][ C1] sd 0:0:1:0: tag#2739 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2034.868389][ C1] sd 0:0:1:0: tag#2739 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2034.877429][ C1] sd 0:0:1:0: tag#2739 CDB[20]: ba 03:21:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2038.357549][ C1] sd 0:0:1:0: tag#2711 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2038.367417][ C1] sd 0:0:1:0: tag#2711 CDB: opcode=0xe5 (vendor) [ 2038.373765][ C1] sd 0:0:1:0: tag#2711 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2038.382837][ C1] sd 0:0:1:0: tag#2711 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2038.391885][ C1] sd 0:0:1:0: tag#2711 CDB[20]: ba 03:21:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2041.257226][ C0] sd 0:0:1:0: tag#2718 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2041.267143][ C0] sd 0:0:1:0: tag#2718 CDB: opcode=0xe5 (vendor) [ 2041.273479][ C0] sd 0:0:1:0: tag#2718 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2041.282511][ C0] sd 0:0:1:0: tag#2718 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2041.291544][ C0] sd 0:0:1:0: tag#2718 CDB[20]: ba 03:21:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x0, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2043.207572][ C0] sd 0:0:1:0: tag#2813 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2043.217798][ C0] sd 0:0:1:0: tag#2813 CDB: opcode=0xe5 (vendor) [ 2043.224149][ C0] sd 0:0:1:0: tag#2813 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2043.233198][ C0] sd 0:0:1:0: tag#2813 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2043.242241][ C0] sd 0:0:1:0: tag#2813 CDB[20]: ba 03:21:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2043.679498][ C0] sd 0:0:1:0: tag#2797 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2043.689347][ C0] sd 0:0:1:0: tag#2797 CDB: opcode=0xe5 (vendor) [ 2043.695702][ C0] sd 0:0:1:0: tag#2797 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2043.704745][ C0] sd 0:0:1:0: tag#2797 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2043.713773][ C0] sd 0:0:1:0: tag#2797 CDB[20]: ba 03:21:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x0, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2044.576572][ C1] sd 0:0:1:0: tag#2808 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2044.586432][ C1] sd 0:0:1:0: tag#2808 CDB: opcode=0xe5 (vendor) [ 2044.592115][ C0] sd 0:0:1:0: tag#2809 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2044.592784][ C1] sd 0:0:1:0: tag#2808 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2044.602586][ C0] sd 0:0:1:0: tag#2809 CDB: opcode=0xe5 (vendor) [ 2044.611592][ C1] sd 0:0:1:0: tag#2808 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2044.617913][ C0] sd 0:0:1:0: tag#2809 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2044.626922][ C1] sd 0:0:1:0: tag#2808 CDB[20]: ba [ 2044.635942][ C0] sd 0:0:1:0: tag#2809 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2044.650073][ C0] sd 0:0:1:0: tag#2809 CDB[20]: ba [ 2044.911326][ C0] sd 0:0:1:0: tag#2752 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2044.921208][ C0] sd 0:0:1:0: tag#2752 CDB: opcode=0xe5 (vendor) [ 2044.927551][ C0] sd 0:0:1:0: tag#2752 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2044.936596][ C0] sd 0:0:1:0: tag#2752 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2044.945658][ C0] sd 0:0:1:0: tag#2752 CDB[20]: ba [ 2046.213479][ C1] sd 0:0:1:0: tag#2810 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=1s [ 2046.223352][ C1] sd 0:0:1:0: tag#2810 CDB: opcode=0xe5 (vendor) [ 2046.229709][ C1] sd 0:0:1:0: tag#2810 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2046.238757][ C1] sd 0:0:1:0: tag#2810 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2046.247786][ C1] sd 0:0:1:0: tag#2810 CDB[20]: ba 03:21:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2048.260490][ C0] sd 0:0:1:0: tag#2754 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2048.270359][ C0] sd 0:0:1:0: tag#2754 CDB: opcode=0xe5 (vendor) [ 2048.276719][ C0] sd 0:0:1:0: tag#2754 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2048.285749][ C0] sd 0:0:1:0: tag#2754 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2048.294771][ C0] sd 0:0:1:0: tag#2754 CDB[20]: ba 03:21:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000002c0)="da", 0x1}]) r5 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2050.726441][ C1] sd 0:0:1:0: tag#2976 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2050.732246][ C0] sd 0:0:1:0: tag#2765 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2050.736304][ C1] sd 0:0:1:0: tag#2976 CDB: opcode=0xe5 (vendor) [ 2050.746094][ C0] sd 0:0:1:0: tag#2765 CDB: opcode=0xe5 (vendor) [ 2050.752499][ C1] sd 0:0:1:0: tag#2976 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2050.758804][ C0] sd 0:0:1:0: tag#2765 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 03:21:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2050.767818][ C1] sd 0:0:1:0: tag#2976 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2050.776837][ C0] sd 0:0:1:0: tag#2765 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2050.785847][ C1] sd 0:0:1:0: tag#2976 CDB[20]: ba [ 2050.799989][ C0] sd 0:0:1:0: tag#2765 CDB[20]: ba [ 2050.934985][ C0] sd 0:0:1:0: tag#2766 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2050.944863][ C0] sd 0:0:1:0: tag#2766 CDB: opcode=0xe5 (vendor) [ 2050.951221][ C0] sd 0:0:1:0: tag#2766 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2050.960265][ C0] sd 0:0:1:0: tag#2766 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2050.969505][ C0] sd 0:0:1:0: tag#2766 CDB[20]: ba 03:21:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2054.221857][ C1] sd 0:0:1:0: tag#2989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2054.231811][ C1] sd 0:0:1:0: tag#2989 CDB: opcode=0xe5 (vendor) [ 2054.238191][ C1] sd 0:0:1:0: tag#2989 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2054.247227][ C1] sd 0:0:1:0: tag#2989 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2054.256267][ C1] sd 0:0:1:0: tag#2989 CDB[20]: ba 03:21:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2056.374432][ C0] sd 0:0:1:0: tag#2949 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2056.384298][ C0] sd 0:0:1:0: tag#2949 CDB: opcode=0xe5 (vendor) [ 2056.390653][ C0] sd 0:0:1:0: tag#2949 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2056.399710][ C0] sd 0:0:1:0: tag#2949 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2056.408833][ C0] sd 0:0:1:0: tag#2949 CDB[20]: ba 03:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x0, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2059.097405][ C1] sd 0:0:1:0: tag#3031 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2059.107281][ C1] sd 0:0:1:0: tag#3031 CDB: opcode=0xe5 (vendor) [ 2059.113632][ C1] sd 0:0:1:0: tag#3031 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2059.122800][ C1] sd 0:0:1:0: tag#3031 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2059.131851][ C1] sd 0:0:1:0: tag#3031 CDB[20]: ba [ 2060.006929][ C0] sd 0:0:1:0: tag#3012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2060.016808][ C0] sd 0:0:1:0: tag#3012 CDB: opcode=0xe5 (vendor) [ 2060.023161][ C0] sd 0:0:1:0: tag#3012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2060.032212][ C0] sd 0:0:1:0: tag#3012 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2060.041273][ C0] sd 0:0:1:0: tag#3012 CDB[20]: ba 03:21:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2062.406563][ C0] sd 0:0:1:0: tag#3034 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2062.416418][ C0] sd 0:0:1:0: tag#3034 CDB: opcode=0xe5 (vendor) [ 2062.422793][ C0] sd 0:0:1:0: tag#3034 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2062.431861][ C0] sd 0:0:1:0: tag#3034 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2062.440904][ C0] sd 0:0:1:0: tag#3034 CDB[20]: ba 03:21:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x0, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2063.600434][ C1] sd 0:0:1:0: tag#3069 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2063.610332][ C1] sd 0:0:1:0: tag#3069 CDB: opcode=0xe5 (vendor) [ 2063.616726][ C1] sd 0:0:1:0: tag#3069 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2063.625792][ C1] sd 0:0:1:0: tag#3069 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2063.634867][ C1] sd 0:0:1:0: tag#3069 CDB[20]: ba 03:21:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x0, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x0, 0x100]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2066.291782][ C0] sd 0:0:1:0: tag#3089 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2066.301654][ C0] sd 0:0:1:0: tag#3089 CDB: opcode=0xe5 (vendor) [ 2066.308014][ C0] sd 0:0:1:0: tag#3089 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2066.317046][ C0] sd 0:0:1:0: tag#3089 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2066.326099][ C0] sd 0:0:1:0: tag#3089 CDB[20]: ba 03:21:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2066.510452][ C1] sd 0:0:1:0: tag#3095 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2066.520406][ C1] sd 0:0:1:0: tag#3095 CDB: opcode=0xe5 (vendor) [ 2066.526754][ C1] sd 0:0:1:0: tag#3095 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2066.535812][ C1] sd 0:0:1:0: tag#3095 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2066.544858][ C1] sd 0:0:1:0: tag#3095 CDB[20]: ba 03:21:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x0, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x0, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2069.221377][ C1] sd 0:0:1:0: tag#3108 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2069.231245][ C1] sd 0:0:1:0: tag#3108 CDB: opcode=0xe5 (vendor) [ 2069.237602][ C1] sd 0:0:1:0: tag#3108 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2069.246898][ C1] sd 0:0:1:0: tag#3108 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2069.255934][ C1] sd 0:0:1:0: tag#3108 CDB[20]: ba [ 2072.258327][ C1] sd 0:0:1:0: tag#3073 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2072.268195][ C1] sd 0:0:1:0: tag#3073 CDB: opcode=0xe5 (vendor) [ 2072.274543][ C1] sd 0:0:1:0: tag#3073 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2072.283619][ C1] sd 0:0:1:0: tag#3073 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2072.292681][ C1] sd 0:0:1:0: tag#3073 CDB[20]: ba 03:21:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x0, 0x100]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2075.987754][ C0] sd 0:0:1:0: tag#3208 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2075.997650][ C0] sd 0:0:1:0: tag#3208 CDB: opcode=0xe5 (vendor) [ 2075.997672][ C1] sd 0:0:1:0: tag#3227 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2076.004059][ C0] sd 0:0:1:0: tag#3208 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2076.004079][ C0] sd 0:0:1:0: tag#3208 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2076.013947][ C1] sd 0:0:1:0: tag#3227 CDB: opcode=0xe5 (vendor) [ 2076.022881][ C0] sd 0:0:1:0: tag#3208 CDB[20]: ba [ 2076.043391][ C1] sd 0:0:1:0: tag#3227 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2076.052452][ C1] sd 0:0:1:0: tag#3227 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2076.061642][ C1] sd 0:0:1:0: tag#3227 CDB[20]: ba [ 2078.175794][ T2101] ================================================================== [ 2078.183903][ T2101] BUG: KCSAN: data-race in __folio_end_writeback / writeout_period [ 2078.191815][ T2101] [ 2078.194122][ T2101] write to 0xffffffff86dc5130 of 8 bytes by interrupt on cpu 0: [ 2078.201725][ T2101] writeout_period+0xa6/0xe0 [ 2078.206333][ T2101] call_timer_fn+0x2e/0x240 [ 2078.210811][ T2101] expire_timers+0x116/0x240 [ 2078.215376][ T2101] __run_timers+0x368/0x410 [ 2078.219855][ T2101] run_timer_softirq+0x56/0x60 [ 2078.224594][ T2101] __do_softirq+0x158/0x2de [ 2078.229074][ T2101] run_ksoftirqd+0x1f/0x30 [ 2078.233468][ T2101] smpboot_thread_fn+0x308/0x4a0 [ 2078.238381][ T2101] kthread+0x2c7/0x2e0 [ 2078.242423][ T2101] ret_from_fork+0x1f/0x30 [ 2078.246818][ T2101] [ 2078.249118][ T2101] read to 0xffffffff86dc5130 of 8 bytes by task 2101 on cpu 1: [ 2078.256668][ T2101] __folio_end_writeback+0x2b3/0x580 [ 2078.262005][ T2101] folio_end_writeback+0x57/0x130 [ 2078.267021][ T2101] end_page_writeback+0x37/0x50 [ 2078.271868][ T2101] ext4_finish_bio+0x3e2/0x430 [ 2078.276611][ T2101] ext4_release_io_end+0x98/0x200 [ 2078.281618][ T2101] ext4_end_io_rsv_work+0x306/0x360 [ 2078.286800][ T2101] process_one_work+0x3fc/0x980 [ 2078.291727][ T2101] worker_thread+0x616/0xa70 [ 2078.296305][ T2101] kthread+0x2c7/0x2e0 [ 2078.300356][ T2101] ret_from_fork+0x1f/0x30 [ 2078.304755][ T2101] [ 2078.307063][ T2101] value changed: 0x000000010002b5c4 -> 0x000000010002b6f0 [ 2078.314145][ T2101] [ 2078.316453][ T2101] Reported by Kernel Concurrency Sanitizer on: [ 2078.322601][ T2101] CPU: 1 PID: 2101 Comm: kworker/u4:6 Not tainted 5.16.0-rc2-syzkaller #0 [ 2078.331071][ T2101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2078.341099][ T2101] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 2078.347841][ T2101] ================================================================== [ 2080.226881][ C0] sd 0:0:1:0: tag#3356 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2080.236757][ C0] sd 0:0:1:0: tag#3356 CDB: opcode=0xe5 (vendor) [ 2080.243097][ C0] sd 0:0:1:0: tag#3356 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2080.252162][ C0] sd 0:0:1:0: tag#3356 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2080.261198][ C0] sd 0:0:1:0: tag#3356 CDB[20]: ba [ 2080.367068][ C1] sd 0:0:1:0: tag#3235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2080.376928][ C1] sd 0:0:1:0: tag#3235 CDB: opcode=0xe5 (vendor) [ 2080.383268][ C1] sd 0:0:1:0: tag#3235 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2080.392316][ C1] sd 0:0:1:0: tag#3235 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2080.401356][ C1] sd 0:0:1:0: tag#3235 CDB[20]: ba 03:21:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x0, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x0, 0x100]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x0, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2083.559000][ C0] sd 0:0:1:0: tag#3222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2083.568910][ C0] sd 0:0:1:0: tag#3222 CDB: opcode=0xe5 (vendor) [ 2083.575265][ C0] sd 0:0:1:0: tag#3222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2083.584309][ C0] sd 0:0:1:0: tag#3222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2083.593347][ C0] sd 0:0:1:0: tag#3222 CDB[20]: ba 03:21:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x0, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct, 0xff80, 0x7, [0x0, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x0, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x0, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0x0, 0x7fff, 0x0, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2085.809753][ C1] sd 0:0:1:0: tag#3214 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2085.819634][ C1] sd 0:0:1:0: tag#3214 CDB: opcode=0xe5 (vendor) [ 2085.825983][ C1] sd 0:0:1:0: tag#3214 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2085.835002][ C1] sd 0:0:1:0: tag#3214 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2085.844043][ C1] sd 0:0:1:0: tag#3214 CDB[20]: ba 03:21:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x0, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2]}, {0x4, @struct, 0x0, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0) [ 2087.163055][ C1] sd 0:0:1:0: tag#3215 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2087.172958][ C1] sd 0:0:1:0: tag#3215 CDB: opcode=0xe5 (vendor) [ 2087.179323][ C1] sd 0:0:1:0: tag#3215 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2087.188374][ C1] sd 0:0:1:0: tag#3215 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2087.197421][ C1] sd 0:0:1:0: tag#3215 CDB[20]: ba 03:21:56 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) [ 2087.340541][ C1] sd 0:0:1:0: tag#3232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2087.350459][ C1] sd 0:0:1:0: tag#3232 CDB: opcode=0xe5 (vendor) [ 2087.356807][ C1] sd 0:0:1:0: tag#3232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2087.365874][ C1] sd 0:0:1:0: tag#3232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2087.374890][ C1] sd 0:0:1:0: tag#3232 CDB[20]: ba 03:21:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r0}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r2}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r2, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x81, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000002c0)="da", 0x1}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) creat(&(0x7f0000000740)='./bus\x00', 0x0) 03:21:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc150d4e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000440)={{r1}, 0x0, 0x0, @unused=[0x1fbfffffd, 0x71, 0x8, 0x8000], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0xa, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x0, 0x800, 0x2, @usage=0xf704, 0xffff, 0x10001, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x100000001, 0x3, 0x403, @usage=0xafef, 0x0, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x11, @usage=0xb43d, 0x8, 0x800, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000b80)={0xa, 0x1, {0x6be, @usage=0x3d9a8bc4, 0x0, 0x3, 0x8, 0x7, 0x3493, 0x1, 0x21, @struct={0x0, 0x2}, 0xff80, 0x7, [0x6, 0x4, 0x1, 0x200, 0x0, 0x6]}, {0x5, @usage=0x9, 0x0, 0x8000, 0x3, 0x4, 0x1000, 0x74, 0x11, @usage, 0x5, 0x0, [0x699ef64b, 0x9f89, 0x0, 0x4, 0x2, 0x12]}, {0x4, @struct, r3, 0xfffffffffffff000, 0x35b, 0x6, 0x2, 0x0, 0x59, @usage=0x6, 0x8, 0x1000, [0x2, 0xfffffffffffffffe, 0x7fff, 0xffffffffffffffff, 0x4, 0x1]}, {0x7fff, 0x3, 0x7fff}}) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000400)=0x0) syz_open_dev$sg(&(0x7f0000000040), 0x4baa, 0x4000) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="da", 0x1}]) r7 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080ffffff80) creat(&(0x7f0000000740)='./bus\x00', 0x0)