buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x1000000, 0x0, 0x0, 0x0) 23:01:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:10 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1498.109824][T18694] loop3: detected capacity change from 0 to 131456 [ 1498.115648][T18698] loop5: detected capacity change from 0 to 264192 [ 1498.161689][ C0] sd 0:0:1:0: tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1498.171544][ C0] sd 0:0:1:0: tag#3271 CDB: opcode=0xe5 (vendor) [ 1498.177977][ C0] sd 0:0:1:0: tag#3271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1498.187017][ C0] sd 0:0:1:0: tag#3271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1498.196064][ C0] sd 0:0:1:0: tag#3271 CDB[20]: ba [ 1498.225255][T18694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1498.261656][T18694] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7366/file0 supports timestamps until 2038 (0x7fffffff) 23:01:11 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) 23:01:11 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000feffffff000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:11 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x2030000, 0x0, 0x0, 0x0) [ 1499.256010][T19026] loop5: detected capacity change from 0 to 264192 [ 1499.270248][T19025] loop3: detected capacity change from 0 to 131456 [ 1499.278780][ C1] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1499.288639][ C1] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1499.294972][ C1] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:11 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) [ 1499.304049][ C1] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1499.313152][ C1] sd 0:0:1:0: tag#3272 CDB[20]: ba 23:01:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1499.389919][T19025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000e01c, mo2=0006] 23:01:11 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x4000000, 0x0, 0x0, 0x0) 23:01:11 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000c0ed00000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1499.480050][T19025] System zones: 1-2, 19-19, 35-38, 46-46 [ 1499.493356][T19025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1499.504251][T19025] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7367/file0 supports timestamps until 2038 (0x7fffffff) [ 1499.530644][T19443] loop5: detected capacity change from 0 to 264192 [ 1499.542215][ C1] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1499.552070][ C1] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1499.558401][ C1] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1499.567447][ C1] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:01:11 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1499.576478][ C1] sd 0:0:1:0: tag#3273 CDB[20]: ba [ 1499.784158][T19548] loop3: detected capacity change from 0 to 131456 [ 1499.830796][T19548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000e01c, mo2=0006] [ 1499.863338][T19548] System zones: 1-2, 19-19, 35-38, 46-46 [ 1499.869527][T19548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1499.890454][T19548] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7368/file0 supports timestamps until 2038 (0x7fffffff) 23:01:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000001000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1a00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:16 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xf000000, 0x0, 0x0, 0x0) 23:01:16 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 23:01:16 executing program 3: time(0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1504.649154][T20310] loop5: detected capacity change from 0 to 264192 [ 1504.659327][T20311] loop3: detected capacity change from 0 to 131456 [ 1504.671502][ C1] sd 0:0:1:0: tag#3278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1504.681337][ C1] sd 0:0:1:0: tag#3278 CDB: opcode=0xe5 (vendor) [ 1504.687783][ C1] sd 0:0:1:0: tag#3278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:16 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 23:01:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1b00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1504.696813][ C1] sd 0:0:1:0: tag#3278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1504.705859][ C1] sd 0:0:1:0: tag#3278 CDB[20]: ba [ 1504.738408][T20311] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1504.802025][T20311] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7369/file0 supports timestamps until 2038 (0x7fffffff) 23:01:17 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 23:01:17 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000004000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1c00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:17 executing program 3: time(0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:17 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x16000000, 0x0, 0x0, 0x0) 23:01:17 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) [ 1506.095158][T20811] loop5: detected capacity change from 0 to 264192 [ 1506.102628][T20810] loop3: detected capacity change from 0 to 131456 [ 1506.118714][ C1] sd 0:0:1:0: tag#3288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1506.128584][ C1] sd 0:0:1:0: tag#3288 CDB: opcode=0xe5 (vendor) [ 1506.134945][ C1] sd 0:0:1:0: tag#3288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1506.144006][ C1] sd 0:0:1:0: tag#3288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1506.149582][T20810] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1506.153052][ C1] sd 0:0:1:0: tag#3288 CDB[20]: ba 23:01:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1d00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:18 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000ffffffffffff07000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1506.200335][T20810] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7370/file0 supports timestamps until 2038 (0x7fffffff) 23:01:18 executing program 3: time(0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1e00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1506.439206][T21200] loop5: detected capacity change from 0 to 264192 [ 1506.458743][T21202] loop3: detected capacity change from 0 to 131456 [ 1506.498863][T21202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1506.552202][T21202] ext4 filesystem being mounted at /root/syzkaller-testdir045425061/syzkaller.sNWnkq/7371/file0 supports timestamps until 2038 (0x7fffffff) 23:01:23 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) 23:01:23 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x20000000, 0x0, 0x0, 0x0) 23:01:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x1f00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:23 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000008000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:23 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:23 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) [ 1511.751161][T22021] loop5: detected capacity change from 0 to 264192 [ 1511.758357][T22023] loop3: detected capacity change from 0 to 131456 [ 1511.770850][ C1] sd 0:0:1:0: tag#3294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1511.780696][ C1] sd 0:0:1:0: tag#3294 CDB: opcode=0xe5 (vendor) [ 1511.787036][ C1] sd 0:0:1:0: tag#3294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1511.796220][ C1] sd 0:0:1:0: tag#3294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1511.805259][ C1] sd 0:0:1:0: tag#3294 CDB[20]: ba 23:01:24 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) 23:01:24 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:24 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xeffdffff, 0x0, 0x0, 0x0) 23:01:24 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000c000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1512.698699][T22422] loop3: detected capacity change from 0 to 131456 [ 1512.699361][T22426] loop5: detected capacity change from 0 to 264192 23:01:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:24 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000040000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:24 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r4) [ 1512.741872][ C0] sd 0:0:1:0: tag#3295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1512.751729][ C0] sd 0:0:1:0: tag#3295 CDB: opcode=0xe5 (vendor) [ 1512.758170][ C0] sd 0:0:1:0: tag#3295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1512.767212][ C0] sd 0:0:1:0: tag#3295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1512.776346][ C0] sd 0:0:1:0: tag#3295 CDB[20]: ba 23:01:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:24 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1512.850708][T22740] loop5: detected capacity change from 0 to 264192 [ 1512.911543][T22845] loop3: detected capacity change from 0 to 131456 23:01:29 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 23:01:29 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xf5ffffff, 0x0, 0x0, 0x0) 23:01:29 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000010000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:29 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:29 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000020000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1518.253679][T23593] loop3: detected capacity change from 0 to 131456 [ 1518.256271][T23598] loop5: detected capacity change from 0 to 264192 [ 1518.287543][ C0] sd 0:0:1:0: tag#3300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1518.297393][ C0] sd 0:0:1:0: tag#3300 CDB: opcode=0xe5 (vendor) 23:01:29 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) [ 1518.303761][ C0] sd 0:0:1:0: tag#3300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1518.312833][ C0] sd 0:0:1:0: tag#3300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1518.321886][ C0] sd 0:0:1:0: tag#3300 CDB[20]: ba 23:01:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2500000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:29 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1518.421636][T23820] loop5: detected capacity change from 0 to 264192 [ 1518.463888][T23918] loop3: detected capacity change from 0 to 131456 23:01:31 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 23:01:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:31 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xfffffdef, 0x0, 0x0, 0x0) 23:01:31 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000004020000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:31 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1519.689674][T24079] loop5: detected capacity change from 0 to 264192 [ 1519.691014][T24081] loop3: detected capacity change from 0 to 131456 [ 1519.707433][ C0] sd 0:0:1:0: tag#3301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1519.717283][ C0] sd 0:0:1:0: tag#3301 CDB: opcode=0xe5 (vendor) [ 1519.723627][ C0] sd 0:0:1:0: tag#3301 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:31 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 23:01:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1519.732668][ C0] sd 0:0:1:0: tag#3301 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1519.741718][ C0] sd 0:0:1:0: tag#3301 CDB[20]: ba 23:01:31 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000030000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:31 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1519.899119][T24387] loop3: detected capacity change from 0 to 140 [ 1519.922867][T24387] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) [ 1519.981864][T24389] loop5: detected capacity change from 0 to 264192 23:01:35 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xfffffff5, 0x0, 0x0, 0x0) 23:01:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:35 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) 23:01:35 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:35 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000040000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1524.221096][T25056] loop5: detected capacity change from 0 to 264192 [ 1524.228611][T25055] loop3: detected capacity change from 0 to 140 [ 1524.245179][ C1] sd 0:0:1:0: tag#3306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1524.255039][ C1] sd 0:0:1:0: tag#3306 CDB: opcode=0xe5 (vendor) [ 1524.258120][T25055] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 23:01:35 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) [ 1524.261382][ C1] sd 0:0:1:0: tag#3306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1524.279761][ C1] sd 0:0:1:0: tag#3306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1524.288794][ C1] sd 0:0:1:0: tag#3306 CDB[20]: ba 23:01:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:35 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xffffffff, 0x0, 0x0, 0x0) [ 1524.450295][ C1] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1524.460172][ C1] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1524.466612][ C1] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1524.475825][ C1] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1524.484887][ C1] sd 0:0:1:0: tag#3307 CDB[20]: ba 23:01:37 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) 23:01:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2a00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:37 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000050000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:37 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0xff71, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:37 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x4, 0x0, 0x0) [ 1526.671468][T25764] loop3: detected capacity change from 0 to 140 [ 1526.681145][T25768] loop5: detected capacity change from 0 to 264192 [ 1526.701199][T25764] EXT4-fs (loop3): bad geometry: block count 256 exceeds size of device (70 blocks) 23:01:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2b00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:38 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) [ 1526.715774][ C0] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1526.725626][ C0] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1526.732002][ C0] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1526.741042][ C0] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1526.750082][ C0] sd 0:0:1:0: tag#3308 CDB[20]: ba 23:01:38 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000060000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2c00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1526.937657][T26189] loop5: detected capacity change from 0 to 264192 23:01:42 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x2d00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:42 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) 23:01:42 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000004060000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:42 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf, 0x0, 0x0) [ 1530.952584][T26780] loop5: detected capacity change from 0 to 264192 [ 1530.989541][ C0] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:42 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:42 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) 23:01:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x5900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1530.999392][ C0] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1531.005724][ C0] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1531.014767][ C0] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1531.023823][ C0] sd 0:0:1:0: tag#3273 CDB[20]: ba 23:01:42 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x16, 0x0, 0x0) [ 1531.114312][ C0] sd 0:0:1:0: tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1531.124180][ C0] sd 0:0:1:0: tag#3274 CDB: opcode=0xe5 (vendor) [ 1531.130526][ C0] sd 0:0:1:0: tag#3274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1531.139667][ C0] sd 0:0:1:0: tag#3274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1531.148726][ C0] sd 0:0:1:0: tag#3274 CDB[20]: ba 23:01:44 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000070000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:44 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x0, 0x0, 0x0, &(0x7f0000013800)) 23:01:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x8000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:44 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x203, 0x0, 0x0) 23:01:44 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1533.289355][T27491] loop5: detected capacity change from 0 to 264192 [ 1533.324453][ C1] sd 0:0:1:0: tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:44 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 23:01:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x8700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:44 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1533.334308][ C1] sd 0:0:1:0: tag#3275 CDB: opcode=0xe5 (vendor) [ 1533.340658][ C1] sd 0:0:1:0: tag#3275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1533.349694][ C1] sd 0:0:1:0: tag#3275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1533.358735][ C1] sd 0:0:1:0: tag#3275 CDB[20]: ba [ 1533.398428][T27692] loop3: detected capacity change from 0 to 131456 [ 1533.429205][T27692] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1533.471612][T27692] EXT4-fs (loop3): get root inode failed [ 1533.477336][T27692] EXT4-fs (loop3): mount failed 23:01:48 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:48 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000080000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x980e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x302, 0x0, 0x0) 23:01:48 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) [ 1537.760647][T28436] loop5: detected capacity change from 0 to 264192 [ 1537.769302][T28437] loop3: detected capacity change from 0 to 131456 [ 1537.809955][T28437] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1537.810569][ C1] sd 0:0:1:0: tag#3280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1537.831921][ C1] sd 0:0:1:0: tag#3280 CDB: opcode=0xe5 (vendor) [ 1537.833738][T28437] EXT4-fs (loop3): get root inode failed [ 1537.838247][ C1] sd 0:0:1:0: tag#3280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1537.843955][T28437] EXT4-fs (loop3): mount failed 23:01:48 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xb80e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:48 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000090000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf00, 0x0, 0x0) [ 1537.852959][ C1] sd 0:0:1:0: tag#3280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1537.852976][ C1] sd 0:0:1:0: tag#3280 CDB[20]: ba 23:01:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xc00e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xc07e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1537.937546][ C1] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1537.947569][ C1] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1537.953903][ C1] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1537.962976][ C1] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1537.972011][ C1] sd 0:0:1:0: tag#3281 CDB[20]: ba [ 1538.070141][T29074] loop5: detected capacity change from 0 to 264192 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 23:01:50 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x1600, 0x0, 0x0) 23:01:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) 23:01:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000a0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1539.515770][T29294] loop5: detected capacity change from 0 to 264192 [ 1539.515839][T29297] loop3: detected capacity change from 0 to 131456 [ 1539.540075][ C1] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1539.549959][ C1] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1539.555746][T29297] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1539.556314][ C1] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1539.577285][ C1] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1539.578582][T29297] EXT4-fs (loop3): get root inode failed [ 1539.586813][ C1] sd 0:0:1:0: tag#3282 CDB[20]: ba [ 1539.592428][T29297] EXT4-fs (loop3): mount failed 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 23:01:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffff00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x2000, 0x0, 0x0) 23:01:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000b0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:50 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1539.663259][T29507] loop3: detected capacity change from 0 to 131456 [ 1539.691052][T29507] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1539.710265][T29507] EXT4-fs (loop3): get root inode failed [ 1539.716011][T29507] EXT4-fs (loop3): mount failed [ 1539.735406][T29572] loop5: detected capacity change from 0 to 264192 [ 1539.746884][ C1] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1539.756741][ C1] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1539.763076][ C1] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1539.772099][ C1] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1539.781130][ C1] sd 0:0:1:0: tag#3283 CDB[20]: ba 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 23:01:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:50 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x4000, 0x0, 0x0) 23:01:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1539.890579][ C1] sd 0:0:1:0: tag#3284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1539.896802][T29834] loop3: detected capacity change from 0 to 131456 [ 1539.900448][ C1] sd 0:0:1:0: tag#3284 CDB: opcode=0xe5 (vendor) [ 1539.908506][T29834] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1539.913278][ C1] sd 0:0:1:0: tag#3284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000c0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 23:01:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1539.934259][ C1] sd 0:0:1:0: tag#3284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1539.935422][T29834] EXT4-fs (loop3): get root inode failed [ 1539.943292][ C1] sd 0:0:1:0: tag#3284 CDB[20]: ba [ 1539.948911][T29834] EXT4-fs (loop3): mount failed 23:01:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {0x0, 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:50 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 23:01:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x400000, 0x0, 0x0) [ 1540.003669][T30051] loop5: detected capacity change from 0 to 264192 [ 1540.050344][T30061] loop3: detected capacity change from 0 to 131456 [ 1540.056979][ C1] sd 0:0:1:0: tag#3285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1540.063103][T30061] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1540.066818][ C1] sd 0:0:1:0: tag#3285 CDB: opcode=0xe5 (vendor) [ 1540.085213][ C1] sd 0:0:1:0: tag#3285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:50 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 1540.094245][ C1] sd 0:0:1:0: tag#3285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1540.103277][ C1] sd 0:0:1:0: tag#3285 CDB[20]: ba [ 1540.103620][T30061] EXT4-fs (loop3): get root inode failed [ 1540.114076][T30061] EXT4-fs (loop3): mount failed 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000d0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:51 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x800000, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 1540.245505][T30285] loop3: detected capacity change from 0 to 131456 [ 1540.253740][T30289] loop5: detected capacity change from 0 to 264192 [ 1540.283122][T30285] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1540.295398][ C0] sd 0:0:1:0: tag#3286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1540.305254][ C0] sd 0:0:1:0: tag#3286 CDB: opcode=0xe5 (vendor) [ 1540.311611][ C0] sd 0:0:1:0: tag#3286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1540.320667][ C0] sd 0:0:1:0: tag#3286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1540.322636][T30285] EXT4-fs (loop3): get root inode failed [ 1540.329720][ C0] sd 0:0:1:0: tag#3286 CDB[20]: ba [ 1540.335336][T30285] EXT4-fs (loop3): mount failed 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x1000000, 0x0, 0x0) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000e0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 1540.432346][ C0] sd 0:0:1:0: tag#3287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1540.442216][ C0] sd 0:0:1:0: tag#3287 CDB: opcode=0xe5 (vendor) [ 1540.448546][ C0] sd 0:0:1:0: tag#3287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1540.457592][ C0] sd 0:0:1:0: tag#3287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1540.466711][ C0] sd 0:0:1:0: tag#3287 CDB[20]: ba 23:01:51 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x2030000, 0x0, 0x0) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 1540.525237][T30829] loop3: detected capacity change from 0 to 131456 [ 1540.532195][T30830] loop5: detected capacity change from 0 to 264192 [ 1540.551305][T30829] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1540.586494][T30829] EXT4-fs (loop3): get root inode failed [ 1540.592231][T30829] EXT4-fs (loop3): mount failed [ 1540.624086][ C0] sd 0:0:1:0: tag#3288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 23:01:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000f0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1540.633936][ C0] sd 0:0:1:0: tag#3288 CDB: opcode=0xe5 (vendor) [ 1540.640291][ C0] sd 0:0:1:0: tag#3288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1540.649350][ C0] sd 0:0:1:0: tag#3288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1540.658412][ C0] sd 0:0:1:0: tag#3288 CDB[20]: ba 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x4000000, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 1540.776144][ C0] sd 0:0:1:0: tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1540.786205][ C0] sd 0:0:1:0: tag#3289 CDB: opcode=0xe5 (vendor) [ 1540.792563][ C0] sd 0:0:1:0: tag#3289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1540.801615][ C0] sd 0:0:1:0: tag#3289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1540.810666][ C0] sd 0:0:1:0: tag#3289 CDB[20]: ba 23:01:51 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00), 0x0, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf000000, 0x0, 0x0) [ 1540.840336][T31237] loop5: detected capacity change from 0 to 264192 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1540.882780][T31278] loop3: detected capacity change from 0 to 131456 23:01:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000100000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x16000000, 0x0, 0x0) 23:01:51 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1540.933643][T31278] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1540.970228][T31278] EXT4-fs (loop3): get root inode failed [ 1540.975905][T31278] EXT4-fs (loop3): mount failed [ 1541.014332][T31498] loop5: detected capacity change from 0 to 264192 23:01:51 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:51 executing program 2: inotify_init1(0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000110000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x20000000, 0x0, 0x0) 23:01:51 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1541.141490][T31712] loop3: detected capacity change from 0 to 131456 [ 1541.162100][T31712] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1541.182336][T31778] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000120000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xeffdffff, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1541.265372][T31712] EXT4-fs (loop3): get root inode failed [ 1541.271047][T31712] EXT4-fs (loop3): mount failed [ 1541.291568][T32002] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 4: inotify_init1(0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000130000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf5ffffff, 0x0, 0x0) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1541.398542][T32143] loop3: detected capacity change from 0 to 131456 [ 1541.425539][T32143] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1541.425858][T32162] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000140000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1541.451141][T32143] EXT4-fs (loop3): get root inode failed [ 1541.456883][T32143] EXT4-fs (loop3): mount failed 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xfffffdef, 0x0, 0x0) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xfffffff5, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1541.589553][T32368] loop3: detected capacity change from 0 to 131456 [ 1541.590652][T32453] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000150000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1541.645661][T32368] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1541.694659][T32368] EXT4-fs (loop3): get root inode failed [ 1541.700375][T32368] EXT4-fs (loop3): mount failed [ 1541.713733][T32613] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x10000000000, 0x0, 0x0) 23:01:52 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1541.826460][ T387] loop3: detected capacity change from 0 to 131456 [ 1541.854329][ T387] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000160000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x40000000000000, 0x0, 0x0) [ 1541.886378][ T387] EXT4-fs (loop3): get root inode failed [ 1541.892089][ T387] EXT4-fs (loop3): mount failed [ 1541.920139][ T542] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x13}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000170000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1542.031100][ T685] loop3: detected capacity change from 0 to 131456 [ 1542.058955][ T788] loop5: detected capacity change from 0 to 264192 23:01:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x80000000000000, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000180000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1542.104459][ T685] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1542.122788][ T685] EXT4-fs (loop3): get root inode failed [ 1542.128447][ T685] EXT4-fs (loop3): mount failed 23:01:52 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000", 0x16, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:52 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:52 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x15}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x16}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1542.217373][ T1016] loop3: detected capacity change from 0 to 131456 [ 1542.229481][ T1016] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1542.252633][ T1161] loop5: detected capacity change from 0 to 264192 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x100000000000000, 0x0, 0x0) [ 1542.286548][ T1016] EXT4-fs (loop3): get root inode failed [ 1542.292280][ T1016] EXT4-fs (loop3): mount failed 23:01:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x17}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000190000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) [ 1542.381941][ T1326] loop3: detected capacity change from 0 to 131456 [ 1542.410624][ T1326] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x203000000000000, 0x0, 0x0) [ 1542.428083][ T1326] EXT4-fs (loop3): get root inode failed [ 1542.433750][ T1326] EXT4-fs (loop3): mount failed [ 1542.440455][ T1511] loop5: detected capacity change from 0 to 264192 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001a0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1542.585071][ T1646] loop3: detected capacity change from 0 to 131456 [ 1542.620705][ T1700] loop5: detected capacity change from 0 to 264192 [ 1542.634052][ T1646] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001b0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1542.686915][ T1646] EXT4-fs (loop3): get root inode failed [ 1542.692659][ T1646] EXT4-fs (loop3): mount failed 23:01:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x400000000000000, 0x0, 0x0) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1542.789053][ T1965] loop5: detected capacity change from 0 to 264192 23:01:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000021b0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1542.873811][ T1973] loop3: detected capacity change from 0 to 131456 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1542.927361][ T1973] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1542.945321][ T2080] loop5: detected capacity change from 0 to 264192 23:01:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf00000000000000, 0x0, 0x0) [ 1542.973358][ T1973] EXT4-fs (loop3): get root inode failed [ 1542.979067][ T1973] EXT4-fs (loop3): mount failed [ 1543.012104][ C1] scsi_io_completion_action: 10 callbacks suppressed 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1543.012137][ C1] sd 0:0:1:0: tag#3304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1543.028666][ C1] sd 0:0:1:0: tag#3304 CDB: opcode=0xe5 (vendor) [ 1543.034995][ C1] sd 0:0:1:0: tag#3304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1543.044038][ C1] sd 0:0:1:0: tag#3304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1543.053076][ C1] sd 0:0:1:0: tag#3304 CDB[20]: ba 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001c0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:53 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1543.148184][ T2416] loop5: detected capacity change from 0 to 264192 23:01:53 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 23:01:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x1600000000000000, 0x0, 0x0) 23:01:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001d0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1543.212697][ T2495] loop3: detected capacity change from 0 to 131456 [ 1543.231152][ T2495] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1543.237954][ T2495] EXT4-fs (loop3): mount failed 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1543.275114][ C1] sd 0:0:1:0: tag#3305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1543.284989][ C1] sd 0:0:1:0: tag#3305 CDB: opcode=0xe5 (vendor) [ 1543.291331][ C1] sd 0:0:1:0: tag#3305 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1543.300361][ C1] sd 0:0:1:0: tag#3305 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1543.309419][ C1] sd 0:0:1:0: tag#3305 CDB[20]: ba [ 1543.316571][ T2607] loop5: detected capacity change from 0 to 264192 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:54 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) 23:01:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x2000000000000000, 0x0, 0x0) 23:01:54 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001e0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1543.422133][ T2815] loop3: detected capacity change from 0 to 131456 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1543.463756][ T2815] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1543.478887][ T2815] EXT4-fs (loop3): mount failed [ 1543.498985][ C0] sd 0:0:1:0: tag#3306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1543.508835][ C0] sd 0:0:1:0: tag#3306 CDB: opcode=0xe5 (vendor) [ 1543.515179][ C0] sd 0:0:1:0: tag#3306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1543.524220][ C0] sd 0:0:1:0: tag#3306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1543.533270][ C0] sd 0:0:1:0: tag#3306 CDB[20]: ba 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) 23:01:54 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f0000000000000400", 0x1c, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1543.610125][ T3112] loop5: detected capacity change from 0 to 264192 23:01:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xeffdffff00000000, 0x0, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1543.651703][ T3140] loop3: detected capacity change from 0 to 131456 [ 1543.677715][ T3140] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1543.686583][ T3140] EXT4-fs (loop3): mount failed 23:01:54 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000001f0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x25}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 2: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, 0x0) [ 1543.715530][ C1] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1543.725391][ C1] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1543.731752][ C1] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1543.740882][ C1] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1543.750102][ C1] sd 0:0:1:0: tag#3307 CDB[20]: ba 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x26}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 23:01:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 23:01:54 executing program 2: perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, 0x0) 23:01:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000140)) [ 1543.851610][ T3464] loop5: detected capacity change from 0 to 264192 [ 1543.869786][ T3473] loop3: detected capacity change from 0 to 131456 [ 1543.890204][ C1] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x27}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1543.900058][ C1] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1543.906407][ C1] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1543.915465][ C1] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1543.924503][ C1] sd 0:0:1:0: tag#3308 CDB[20]: ba 23:01:54 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000200000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, 0x0) 23:01:54 executing program 2: getxattr(0x0, &(0x7f0000000040)=@known='security.apparmor\x00', 0x0, 0x0) madvise(&(0x7f0000928000/0x4000)=nil, 0x4000, 0xe) [ 1543.944253][ T3473] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated 23:01:54 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 23:01:54 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x303) 23:01:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 1543.983775][ T3473] EXT4-fs (loop3): get root inode failed [ 1543.989501][ T3473] EXT4-fs (loop3): mount failed 23:01:54 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000240)) 23:01:54 executing program 2: unshare(0x30010200) [ 1544.044652][ T3827] loop5: detected capacity change from 0 to 264192 [ 1544.087028][ T3835] loop3: detected capacity change from 0 to 131456 [ 1544.103865][ C0] sd 0:0:1:0: tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1544.113737][ C0] sd 0:0:1:0: tag#3309 CDB: opcode=0xe5 (vendor) [ 1544.120077][ C0] sd 0:0:1:0: tag#3309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:01:54 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000010200000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:54 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000240)) 23:01:54 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x8042) 23:01:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x29}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1544.129117][ C0] sd 0:0:1:0: tag#3309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1544.138129][ C0] sd 0:0:1:0: tag#3309 CDB[20]: ba 23:01:54 executing program 2: syslog(0x3, &(0x7f0000000000)=""/107, 0x6b) 23:01:55 executing program 4: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000240)) [ 1544.211072][ T3835] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1544.236938][ T4043] loop5: detected capacity change from 0 to 264192 23:01:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0xffffffffffffffff, 0x0, 0x0) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1544.419204][ T3835] EXT4-fs (loop3): get root inode failed [ 1544.425034][ T3835] EXT4-fs (loop3): mount failed 23:01:55 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d}], 0x0, &(0x7f0000013800)) 23:01:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x4) 23:01:55 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000210000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:55 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x121080) 23:01:55 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}) 23:01:55 executing program 4: request_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) [ 1544.598327][ T4382] loop5: detected capacity change from 0 to 264192 [ 1544.621974][ T4406] loop3: detected capacity change from 0 to 131456 [ 1544.628738][ C1] sd 0:0:1:0: tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1544.638584][ C1] sd 0:0:1:0: tag#3310 CDB: opcode=0xe5 (vendor) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1544.644956][ C1] sd 0:0:1:0: tag#3310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1544.654180][ C1] sd 0:0:1:0: tag#3310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1544.663204][ C1] sd 0:0:1:0: tag#3310 CDB[20]: ba 23:01:55 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000220000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:55 executing program 4: r0 = openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1544.697139][ T4406] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1544.736221][ T4600] loop5: detected capacity change from 0 to 264192 23:01:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf) [ 1544.788121][ T4406] EXT4-fs (loop3): get root inode failed [ 1544.793774][ T4406] EXT4-fs (loop3): mount failed [ 1544.835717][ C0] sd 0:0:1:0: tag#3311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1544.845704][ C0] sd 0:0:1:0: tag#3311 CDB: opcode=0xe5 (vendor) [ 1544.852070][ C0] sd 0:0:1:0: tag#3311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1544.861121][ C0] sd 0:0:1:0: tag#3311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1544.870161][ C0] sd 0:0:1:0: tag#3311 CDB[20]: ba 23:01:55 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:55 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000230000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:55 executing program 4: rt_sigaction(0xc, &(0x7f0000000300)={&(0x7f0000000280)="f36c0f016781c4c1596976a5660f2b63520ff2fac4c19e5ff8660f3a14e90d650f1fdac4c3915fa66556666600c4c1475c6d0e", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000400)) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x59}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:55 executing program 2: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300), 0x0) 23:01:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x16) [ 1544.954616][ T4912] loop5: detected capacity change from 0 to 264192 [ 1544.988104][ T4984] loop3: detected capacity change from 0 to 131456 [ 1544.994702][ C1] sd 0:0:1:0: tag#3312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:01:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @nfc, @sco={0x1f, @fixed}, @rc={0x1f, @none}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='wg0\x00'}) 23:01:55 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000240000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x87}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000280)=0x80) 23:01:55 executing program 4: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) fork() mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) [ 1545.004540][ C1] sd 0:0:1:0: tag#3312 CDB: opcode=0xe5 (vendor) [ 1545.010895][ C1] sd 0:0:1:0: tag#3312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1545.019951][ C1] sd 0:0:1:0: tag#3312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1545.029003][ C1] sd 0:0:1:0: tag#3312 CDB[20]: ba 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:55 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:55 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x203) [ 1545.074457][ T4984] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1545.084637][ T4984] EXT4-fs (loop3): group descriptors corrupted! 23:01:55 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sync() [ 1545.134255][ T5234] loop5: detected capacity change from 0 to 264192 [ 1545.144701][ T5249] loop3: detected capacity change from 0 to 131456 [ 1545.164829][ T5249] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1545.175032][ T5249] EXT4-fs (loop3): group descriptors corrupted! 23:01:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1545.181943][ C1] sd 0:0:1:0: tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1545.191798][ C1] sd 0:0:1:0: tag#3270 CDB: opcode=0xe5 (vendor) [ 1545.198145][ C1] sd 0:0:1:0: tag#3270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1545.207196][ C1] sd 0:0:1:0: tag#3270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1545.216245][ C1] sd 0:0:1:0: tag#3270 CDB[20]: ba 23:01:56 executing program 2: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x0}, 0x64) fork() pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe, 0xffffffffffffffff) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) 23:01:56 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000250000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:56 executing program 4: modify_ldt$read_default(0x2, &(0x7f0000000040)=""/38, 0x26) 23:01:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x302) 23:01:56 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:56 executing program 4: mknodat$null(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 23:01:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:56 executing program 4: r0 = fork() tgkill(r0, r0, 0x0) [ 1546.001328][ T5572] loop3: detected capacity change from 0 to 131456 [ 1546.009754][ T5622] loop5: detected capacity change from 0 to 264192 [ 1546.029021][ T5572] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.039172][ T5572] EXT4-fs (loop3): group descriptors corrupted! 23:01:56 executing program 2: readlinkat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)=""/50, 0x32) 23:01:56 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000000)={'veth0_to_team\x00', @ifru_ivalue}) 23:01:56 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000260000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:56 executing program 4: unshare(0x40000) 23:01:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf00) [ 1546.153160][ T5874] loop3: detected capacity change from 0 to 131456 23:01:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:56 executing program 2: openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x40000, 0x0) 23:01:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002600)={@in, 0x0, 0x0, 0x0, 0x0, "ec3fc42de3cd61a44b93525234391d630ceb50a83c9067de39bd168194e22b212a67d442b5d793dc6c82bc65e2344373e96972ad656bb923b68c9a8d7b14d3a00c39f780c1a155a0dd58890b8240435f"}, 0xd8) [ 1546.199049][ T5874] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.209166][ T5874] EXT4-fs (loop3): group descriptors corrupted! [ 1546.228855][ T5993] loop5: detected capacity change from 0 to 264192 23:01:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x1600) 23:01:56 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000002200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000270000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:57 executing program 4: keyctl$update(0x2, 0x0, &(0x7f0000000000)='@', 0x1) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:57 executing program 4: r0 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100001918"]) 23:01:57 executing program 2: mq_open(&(0x7f0000000140)='\x00', 0x0, 0x0, 0x0) [ 1546.365862][ T6303] loop3: detected capacity change from 0 to 131456 [ 1546.384091][ T6303] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.394229][ T6303] EXT4-fs (loop3): group descriptors corrupted! [ 1546.402548][ T6306] loop5: detected capacity change from 0 to 264192 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000280000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1546.438344][ T6337] autofs4:pid:6337:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.419430401), cmd(0xc018937e) [ 1546.452179][ T6337] autofs4:pid:6337:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) 23:01:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x2000) 23:01:57 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:57 executing program 2: io_uring_setup(0x1009, &(0x7f0000000140)={0x0, 0xc448, 0x1f}) 23:01:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@empty, @remote, @empty, 0x0, 0x2, 0x1}) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1546.507488][ T6516] loop5: detected capacity change from 0 to 264192 [ 1546.528593][ T6563] loop3: detected capacity change from 0 to 131456 23:01:57 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) syz_io_uring_setup(0xda3, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) [ 1546.559676][ T6563] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.569888][ T6563] EXT4-fs (loop3): group descriptors corrupted! 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000290000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe98}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'gretap0\x00', 0x0}) 23:01:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socketpair(0x18, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:01:57 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x4000) [ 1546.661313][ T6835] loop5: detected capacity change from 0 to 264192 [ 1546.695381][ T6846] loop3: detected capacity change from 0 to 131456 23:01:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private1, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x43ae}) 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000002a0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 2: clone3(&(0x7f0000000280)={0x10000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:01:57 executing program 4: add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) [ 1546.717241][ T6846] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.727473][ T6846] EXT4-fs (loop3): group descriptors corrupted! 23:01:57 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xeb8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:57 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:01:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0), 0x8) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000), 0x8) [ 1546.794432][ T6992] loop5: detected capacity change from 0 to 264192 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xec0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000003f0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x400000) [ 1546.867855][ T7170] loop3: detected capacity change from 0 to 131456 [ 1546.900976][ T7170] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1546.911178][ T7170] EXT4-fs (loop3): group descriptors corrupted! 23:01:57 executing program 4: clone3(&(0x7f0000000340)={0xe0320c00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:01:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:01:57 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) [ 1546.927113][ T7200] loop5: detected capacity change from 0 to 264192 23:01:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000400000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:01:57 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400), 0x0, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1547.024409][ T7488] loop5: detected capacity change from 0 to 264192 [ 1547.034720][ T7432] loop3: detected capacity change from 0 to 131456 [ 1547.059207][ T7432] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1547.069301][ T7432] EXT4-fs (loop3): group descriptors corrupted! 23:02:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:00 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x800000) 23:02:00 executing program 4: syz_io_uring_setup(0x159c, &(0x7f0000000480), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 23:02:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000ffffffffffffff7f0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:00 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1549.909215][ T7494] loop5: detected capacity change from 0 to 264192 [ 1549.916474][ T7497] loop3: detected capacity change from 0 to 131456 [ 1549.933063][ C1] scsi_io_completion_action: 5 callbacks suppressed [ 1549.933093][ C1] sd 0:0:1:0: tag#3301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1549.949523][ C1] sd 0:0:1:0: tag#3301 CDB: opcode=0xe5 (vendor) 23:02:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000ffffff850000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:00 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 23:02:00 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1549.955853][ C1] sd 0:0:1:0: tag#3301 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1549.964891][ C1] sd 0:0:1:0: tag#3301 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1549.973932][ C1] sd 0:0:1:0: tag#3301 CDB[20]: ba 23:02:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@empty, @remote, @empty}) [ 1550.023279][ T7497] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1550.033284][ T7497] EXT4-fs (loop3): group descriptors corrupted! 23:02:00 executing program 4: openat$vcsu(0xffffffffffffff9c, 0x0, 0x410080, 0x0) 23:02:00 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x1000000) 23:02:00 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:00 executing program 4: io_uring_setup(0x5eb, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000000)={0x0, 0xcf39, 0x8, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1550.124506][ T7917] loop5: detected capacity change from 0 to 264192 [ 1550.153757][ T7922] loop3: detected capacity change from 0 to 131456 23:02:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000001860000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:00 executing program 4: r0 = socket(0x1e, 0x4, 0x0) getpeername(r0, 0x0, 0x0) [ 1550.180581][ C1] sd 0:0:1:0: tag#3302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1550.190609][ C1] sd 0:0:1:0: tag#3302 CDB: opcode=0xe5 (vendor) [ 1550.196938][ C1] sd 0:0:1:0: tag#3302 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1550.205976][ C1] sd 0:0:1:0: tag#3302 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1550.215032][ C1] sd 0:0:1:0: tag#3302 CDB[20]: ba 23:02:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:00 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x2030000) [ 1550.248145][ T7922] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1550.258322][ T7922] EXT4-fs (loop3): group descriptors corrupted! [ 1550.297492][ T8236] loop5: detected capacity change from 0 to 264192 [ 1550.330656][ C0] sd 0:0:1:0: tag#3303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1550.340520][ C0] sd 0:0:1:0: tag#3303 CDB: opcode=0xe5 (vendor) [ 1550.346870][ C0] sd 0:0:1:0: tag#3303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1550.355922][ C0] sd 0:0:1:0: tag#3303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1550.364962][ C0] sd 0:0:1:0: tag#3303 CDB[20]: ba 23:02:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:03 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000008500)) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:02:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:03 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013", 0x5, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:03 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000ffffff8c0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:03 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x4000000) [ 1553.154735][ T8349] loop5: detected capacity change from 0 to 264192 [ 1553.155089][ T8343] loop3: detected capacity change from 0 to 131456 [ 1553.181548][ T8343] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1553.184245][ C1] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:03 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000ffffffda0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1553.191597][ T8343] EXT4-fs (loop3): group descriptors corrupted! [ 1553.201374][ C1] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1553.201395][ C1] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1553.222943][ C1] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1553.232030][ C1] sd 0:0:1:0: tag#3308 CDB[20]: ba 23:02:03 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "98c90acb7a136194063fabc40fd1d143e43e11bfbcaf2948fc8cbca157b21425e7e4b1d0fbb3882727a0ab7505d87bcd6c2e26ca9a91b7afa0864b5552bd5f5e"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) 23:02:03 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf000000) 23:02:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:03 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xab) [ 1553.311445][ T8568] loop5: detected capacity change from 0 to 264192 [ 1553.332384][ C1] sd 0:0:1:0: tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1553.342328][ C1] sd 0:0:1:0: tag#3309 CDB: opcode=0xe5 (vendor) [ 1553.348672][ C1] sd 0:0:1:0: tag#3309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:03 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) [ 1553.357732][ C1] sd 0:0:1:0: tag#3309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1553.366765][ C1] sd 0:0:1:0: tag#3309 CDB[20]: ba 23:02:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:06 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x145) write$binfmt_misc(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="5300000044a6aeabc8161520000000000000001000fff64017"], 0xff6c) 23:02:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:06 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000001e40000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:06 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x16000000) [ 1556.288864][ T8778] loop5: detected capacity change from 0 to 264192 [ 1556.296697][ T8776] loop3: detected capacity change from 0 to 131456 [ 1556.312134][ C1] sd 0:0:1:0: tag#3314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1556.321984][ C1] sd 0:0:1:0: tag#3314 CDB: opcode=0xe5 (vendor) [ 1556.328316][ C1] sd 0:0:1:0: tag#3314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:06 executing program 4: msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) 23:02:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:06 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffff00000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 1556.337364][ C1] sd 0:0:1:0: tag#3314 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1556.346618][ C1] sd 0:0:1:0: tag#3314 CDB[20]: ba [ 1556.372622][ T8776] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1556.382648][ T8776] EXT4-fs (loop3): group descriptors corrupted! 23:02:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:06 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x20000000) [ 1556.462674][ T9094] loop5: detected capacity change from 0 to 264192 [ 1556.501462][ C1] sd 0:0:1:0: tag#3315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1556.511307][ C1] sd 0:0:1:0: tag#3315 CDB: opcode=0xe5 (vendor) [ 1556.517646][ C1] sd 0:0:1:0: tag#3315 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1556.526687][ C1] sd 0:0:1:0: tag#3315 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1556.535719][ C1] sd 0:0:1:0: tag#3315 CDB[20]: ba 23:02:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:09 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:09 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000002e00), 0xffffffffffffffff) 23:02:09 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffff60000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:09 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xeffdffff) 23:02:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000280), 0x4) [ 1559.430549][ T9307] loop5: detected capacity change from 0 to 264192 [ 1559.442549][ T9311] loop3: detected capacity change from 0 to 131456 23:02:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1559.472899][ C0] sd 0:0:1:0: tag#3264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1559.482854][ C0] sd 0:0:1:0: tag#3264 CDB: opcode=0xe5 (vendor) [ 1559.489199][ C0] sd 0:0:1:0: tag#3264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1559.498230][ C0] sd 0:0:1:0: tag#3264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1559.507264][ C0] sd 0:0:1:0: tag#3264 CDB[20]: ba 23:02:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:09 executing program 4: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x4100, 0x0) 23:02:09 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffdf90000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:09 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf5ffffff) [ 1559.541669][ T9311] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1559.551963][ T9311] EXT4-fs (loop3): group descriptors corrupted! [ 1559.642917][ C1] sd 0:0:1:0: tag#3265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1559.652779][ C1] sd 0:0:1:0: tag#3265 CDB: opcode=0xe5 (vendor) [ 1559.659125][ C1] sd 0:0:1:0: tag#3265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1559.668157][ C1] sd 0:0:1:0: tag#3265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1559.677286][ C1] sd 0:0:1:0: tag#3265 CDB[20]: ba [ 1559.686203][ T9729] loop5: detected capacity change from 0 to 264192 23:02:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3}, @NFT_MSG_NEWFLOWTABLE={0x14}], {0x14}}, 0x50}}, 0x0) 23:02:12 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e000000130000", 0x7, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:12 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffdfd0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:12 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xfffffdef) 23:02:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1562.562918][ T9837] loop5: detected capacity change from 0 to 264192 [ 1562.572197][ T9843] loop3: detected capacity change from 0 to 131456 [ 1562.587754][ T9843] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1562.597805][ T9843] EXT4-fs (loop3): group descriptors corrupted! 23:02:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:12 executing program 4: r0 = socket$inet(0x2, 0x3, 0x81) sendmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) 23:02:12 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1562.621388][ C1] sd 0:0:1:0: tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1562.631253][ C1] sd 0:0:1:0: tag#3270 CDB: opcode=0xe5 (vendor) [ 1562.637590][ C1] sd 0:0:1:0: tag#3270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1562.646643][ C1] sd 0:0:1:0: tag#3270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1562.655681][ C1] sd 0:0:1:0: tag#3270 CDB[20]: ba 23:02:12 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffffe0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) 23:02:12 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xfffffff5) 23:02:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1562.734418][T10156] loop3: detected capacity change from 0 to 131456 [ 1562.749775][T10159] loop5: detected capacity change from 0 to 264192 [ 1562.784426][T10156] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1562.790095][ C1] sd 0:0:1:0: tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1562.794474][T10156] EXT4-fs (loop3): group descriptors corrupted! [ 1562.804255][ C1] sd 0:0:1:0: tag#3271 CDB: opcode=0xe5 (vendor) [ 1562.816790][ C1] sd 0:0:1:0: tag#3271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1562.825827][ C1] sd 0:0:1:0: tag#3271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:02:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f80)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)}, {&(0x7f0000002100)=""/127, 0x7f}], 0x2, &(0x7f0000002180)}, 0x10001}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="1800000000000000ff06004a60ebef2c47fe3b04dc0700acd37913b1f73ab71d6dc45954a8205787ffff992d4182e0000002fec513d12adb64fe868b17ee10d2d603892ae97f2c182307050491e76079b79a6e319aad462f9691ba629a777fb5d0a0583b7ec4e30a00d2fec1de6770338786a729bee41e9ec39b4bc291b928ef9f1b12e68f74ab829bfab4877b07f8112d75f25cfa60b42e5eafe40debd93f5c8843542ce87ccd81b56a7ae49a9d9c05298e54258ce11df000d9fa45e8a8dcbd98d41df16b4ebd66464d1e7f66e11a5463afc56cffa277233a378e5cbdf9d18aa6f823a0eee8e60f2627681200021afcffab6b76713074fa1b737b6dd68457b0b100000000000000e7aab97628569897d804986838614b32e2eb83b4cd080277abb4862824672d7ef659a3c2b22d0a04265db33bdb1d8dde26cecba021e627df1e13015900953b245c3db57fd510dff19516e6456c9560e298785fe0f90e010500722ea99cfcd862f8000000000000b7f91b24204ee5937a5ed2bc800da626604f179b56c1cab48aed63a30000000000000094f6113b17a1a679fea2c9a8f3d49b0687ced9d170914d7c08ea8a3ffc1b4dc2394b3dc3bfe86452f044183729dd5f4baa63f744982ebd6d1a0036e8231e1e5b2d63d4d30be7a17333424475adeafa2a6ca643ed1be45c869a8b4b69098fd7ad2f8d8b50b1eb14b5011e9a5b6ec345d3a2cf282db29052c8463c09d239ee2aa3a97a170f7f3afa435d07b9b5d1be8527b9acdc7dea2c4f5969bae4d8115fb6a7bc72e15045dd1d4654ba4bfffffffffffffffb36cae40f0a25955257cac2fbae73e3b066a59b27df5f96e122534b2cc6c8c298eafff148aefd6cc9e57f68137392f85fd6d5791a8a3c2ac7c6e02662b86b577ceef4dcece7141aa0ff4e0a6dac436b7be3983a7de4c5d2b6a0124ab2cb83d197059dff5229a6001c66ad4ab6fe55a0319ab26e804bf14d636e292912f1d52cffad48cc180c8b082a78496675fb70e50d5184e704d5195a3a487c76145ffde841c0153a5ddbf52a70a63923b5868e5a433969d359a99965f600fb7a7916d6b2297fb602e59143a2b2a40bdfb795986feea7021bc1361ad120c45b0f6d561a56fc3bcd51533245ef2905c6fb46ae068575457fe13804b3514b9903b76a1890c0b7f8713c67850fa93536299396e43600005dff234c0fdb4329ea7a412b072b91b220d300002eac42dd451616d6236e86b70100cf767cb2cc8337dc54c2214ce0ed6b8295e7d3703c4155a050fd8df6d31d039c98e6a18d2e92fb414df2782c99a79ee56b3e0133c92605895bd2e12deaf7923c7a2004d534e024fa6f0113fa784062203100000000000000000000000000000000000000000000004d7df6fe3a8dfdc8c09ef0fa6366022fe0d329f25802d7f69eead5873945d9a7e48447ef5fe0c99253b2fc61155cbbaf22a4b4ee42e4a78aba821ab83367443c93d7a8e6c0df2c966a3c3e7ae025a84c1830a0c2ba31c6de62873d0578ec0861ab839f36441c8b09885bd5104632b3ad7de4945b6dc9f51a12f77f9019c38f112d4771a1d06ee1ece6f975fb3a21fb6682f7e16971012f7ff77aa4d84090948905685f7e864bed7417f9256cbf742e546588efa4b169a414c5b514d4d384911d116eabcba50eaa36e63feeb1748c8c77939fa1cbc7c470cd4baab5efe145ecb41632a9d3004b01158fea35dd5629e9022585d68a16c7535e251e211e01d1ef0c8604ad8c12a281df04bf13a465e4ce8e0bfba098f3cfd5d5512bbf2742881f828d0a3a77c2a97d94512154f392933daf2cd0da58a8c2eb5737002b26db96d1d53d4b500d9409f68635764369e76dcea08c4fe7c28f529ea340da6351c50db6146d7126feb17a00000000000000000000000000deddd47e8e154c0e7ee38b293c7352b48bf324cee466a4070cb3ea22fdc5cacd6bbe77111921e197257205ed4b3eca34d62f537a29575c70f5dcee40ea0a540c95a61f0655be73f3601e5c2df00f8d1dbd0648532c2e8827305b99d7e2810392000e7a7d428693cebd2b9ff0753d4045fb89b122b55f555f20a45aac094aa2a59d24ee621e7245cf0a266e779319cd9694d1e871e6b82c235ffdda0500000000000000b2fef00b623ede0e7add75cde17a08fec2b752ddc3496d8e1f47a6a92630eb0c182f5f679642c206dc4aa30a83dd431f78c14105e498710821b27954967929f510587ddec437442ed0a7ad3d3f165314c11a633a9d769724ca81867af81bdaa315bb075808a4967369c4af336cd79ed049a1335aa93df0d4db62a75a53d96ac3c4630126752cdd371d575ae0be62cf565ba33abc11a554cd7881b56bfa059f0032527dbbc941ba6726261522fa31bda9c8d4621b9ad35da68296a39d41d6d07b2af1976e6086b11b3cb6be8ce5e5f4bdb17c22e04148fec59c9ab12866465d09a0bd14ccc078d71097b5360244e44a8e72f2e04c6c90788c92094ae8f7efb6debe4b7cac47c226f344d020c9ca238f70f01113c9a77baa9398f14195be7529b9efec7e4721671ab20573d6d9c4d7ae76913236c1835ea1d5d244a78fcd4a7c72623419ea85b419d5d25a2121dbef933922d99484ba0ca9cf34afb84d415696bfe923fe5d11164a6f391baef5653f730ad24551bd309ba202157f4675afc1a79f63674fe54556e153f10f58143fdbce126a9581232525e0088f5991698be6d231a03cca7114989fd9bb70d47300b850c0de859a3b5ffd0825364f1fbad5e3f9925473fd3787691f0626d7d29cb463f4d64770bf85baf53c3d2388bcbdf7edfb6522567da52ad6cf04e189fcf0c736ea8edda7408e2e39c2c05273c71ee54eb41d408ac06d1ac9cb8825c711a35866c4f811ea60451245c7b85d5ab19ade9133d48af87331d0f1baa0ca942451cd045aa5c5f3f447203980edb701a6f67d9e0c21a606b700c4fc4ba1bce54c3be5c1dda7ca4cd27bbb7125445ccc68613bd7186976b2f7548491560b8a53638a9eaf3b4f156ce0ab69c94ebb32946ab7f597762f0cfefa862268f49dbe074ec489e07dd41879b0639dec7e920ec6887f68b9c5b02c87a5cb49a8ac2e47ad22ef727f94d24872bc5a199017f404ae002af10614375d6d8566778d5181989a042db6a32ad1060098c8502aa2bf9876703d85f14c4854a27394bb736bb90727cc0472130c6a6c40b8f65410a41c4e40c6c89fdd043614c928d9d35287f805d119514bd322ca9720227378b4aa6ba940a28a3961c0808cc4f771f33b9265a4738d8c99747b71323dae94f14a"], 0x18}}], 0x1b1, 0x0) [ 1562.834877][ C1] sd 0:0:1:0: tag#3271 CDB[20]: ba 23:02:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:13 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x10000000000) 23:02:13 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:13 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000fffffffffffffffe0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1562.923482][ C0] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1562.933356][ C0] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1562.939707][ C0] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1562.948763][ C0] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1562.957802][ C0] sd 0:0:1:0: tag#3272 CDB[20]: ba [ 1562.965135][T10393] loop3: detected capacity change from 0 to 131456 23:02:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1562.979233][T10393] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1562.989309][T10393] EXT4-fs (loop3): group descriptors corrupted! 23:02:13 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x40000000000000) 23:02:13 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e00000013000000", 0x8, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1563.028678][T10597] loop5: detected capacity change from 0 to 264192 [ 1563.082260][ C0] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1563.092130][ C0] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1563.098456][ C0] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1563.107702][ C0] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1563.116746][ C0] sd 0:0:1:0: tag#3273 CDB[20]: ba 23:02:13 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000000000000000fff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1563.132410][T10688] loop3: detected capacity change from 0 to 131456 [ 1563.151389][T10688] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1563.161586][T10688] EXT4-fs (loop3): group descriptors corrupted! [ 1563.206700][T10894] loop5: detected capacity change from 0 to 264192 23:02:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:15 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x80000000000000) 23:02:15 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:15 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffff7ff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000140)="170aeb5a3421c76ee54e3d24"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1565.892163][T10902] loop5: detected capacity change from 0 to 264192 [ 1565.897593][T10901] loop3: detected capacity change from 0 to 131456 [ 1565.920706][T10901] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1565.930834][T10901] EXT4-fs (loop3): group descriptors corrupted! 23:02:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000fffffbff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:16 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1565.938553][ C0] sd 0:0:1:0: tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1565.948378][ C0] sd 0:0:1:0: tag#3274 CDB: opcode=0xe5 (vendor) [ 1565.954715][ C0] sd 0:0:1:0: tag#3274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1565.963855][ C0] sd 0:0:1:0: tag#3274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1565.972885][ C0] sd 0:0:1:0: tag#3274 CDB[20]: ba 23:02:16 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:16 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x100000000000000) 23:02:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2600}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1566.077723][T11205] loop5: detected capacity change from 0 to 264192 [ 1566.103431][ C0] sd 0:0:1:0: tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1566.104353][T11225] loop3: detected capacity change from 0 to 131456 [ 1566.113292][ C0] sd 0:0:1:0: tag#3275 CDB: opcode=0xe5 (vendor) 23:02:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000001fffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1566.126159][ C0] sd 0:0:1:0: tag#3275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1566.127790][T11225] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1566.135204][ C0] sd 0:0:1:0: tag#3275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1566.135224][ C0] sd 0:0:1:0: tag#3275 CDB[20]: ba [ 1566.159411][T11225] EXT4-fs (loop3): group descriptors corrupted! 23:02:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2800}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:16 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x203000000000000) 23:02:16 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1566.264865][T11589] loop5: detected capacity change from 0 to 264192 [ 1566.295579][T11637] loop3: detected capacity change from 0 to 131456 [ 1566.304834][ C0] sd 0:0:1:0: tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1566.314669][ C0] sd 0:0:1:0: tag#3276 CDB: opcode=0xe5 (vendor) [ 1566.321012][ C0] sd 0:0:1:0: tag#3276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1566.330059][ C0] sd 0:0:1:0: tag#3276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1566.339117][ C0] sd 0:0:1:0: tag#3276 CDB[20]: ba [ 1566.370649][T11637] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1566.380777][T11637] EXT4-fs (loop3): group descriptors corrupted! 23:02:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000140)="170aeb5a3421c76ee54e3d24"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2900}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:19 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000007fffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:19 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x400000000000000) 23:02:19 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1569.136328][T11845] loop3: detected capacity change from 0 to 131456 [ 1569.142138][T11849] loop5: detected capacity change from 0 to 264192 [ 1569.151059][T11845] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:19 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000ffffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1569.187065][ C0] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1569.197012][ C0] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1569.203366][ C0] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1569.212758][ C0] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1569.221814][ C0] sd 0:0:1:0: tag#3281 CDB[20]: ba 23:02:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1569.315530][T12091] loop5: detected capacity change from 0 to 264192 23:02:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000140)="170aeb5a3421c76ee54e3d24"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:22 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:22 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf00000000000000) 23:02:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:22 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000007ffffffffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xc, &(0x7f0000000140)="170aeb5a3421c76ee54e3d24"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1572.126389][T12176] loop5: detected capacity change from 0 to 264192 [ 1572.139144][T12177] loop3: detected capacity change from 0 to 131456 [ 1572.149935][T12177] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d00}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:22 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000007fffffffffffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1572.169907][ C0] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1572.179761][ C0] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1572.186142][ C0] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1572.195178][ C0] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1572.204220][ C0] sd 0:0:1:0: tag#3282 CDB[20]: ba 23:02:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5900}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:22 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x2, &(0x7f0000000300)=[{&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:22 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x1600000000000000) 23:02:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:22 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000feffffffffffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1572.292252][T12454] loop5: detected capacity change from 0 to 264192 [ 1572.315679][T12561] loop3: detected capacity change from 0 to 131456 [ 1572.329116][T12561] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1572.371820][ C1] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1572.381714][ C1] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) [ 1572.388100][ C1] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1572.397240][ C1] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1572.406275][ C1] sd 0:0:1:0: tag#3283 CDB[20]: ba 23:02:22 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8700}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1572.416041][T12703] loop5: detected capacity change from 0 to 264192 23:02:22 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000ffffffffffffffff0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1572.464412][T12738] loop3: detected capacity change from 0 to 131456 [ 1572.490571][T12738] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1572.532669][T12911] loop5: detected capacity change from 0 to 264192 23:02:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x980e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000020000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:25 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:25 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x2000000000000000) 23:02:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x600, 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)="acf0c6", 0x3}, {&(0x7f0000000180)="dc5850b7c83e95d41a3b991f503003025ccaca1fbcb2a225f3add23114a1ee705c2b3cd56f404a56c4b5a804bd52662ccd3f43442342d9a09117e468676c4c36", 0x40}], 0x4, &(0x7f00000002c0)={[{@grpid}], [{@smackfsroot}, {@smackfsfloor={'smackfsfloor', 0x3d, '/}}\xd7'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) [ 1575.330535][T13017] loop5: detected capacity change from 0 to 264192 [ 1575.343037][T13024] loop3: detected capacity change from 0 to 131456 [ 1575.356009][T13042] loop4: detected capacity change from 0 to 3 [ 1575.360102][ C0] sd 0:0:1:0: tag#3288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1575.371926][ C0] sd 0:0:1:0: tag#3288 CDB: opcode=0xe5 (vendor) 23:02:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1575.378261][ C0] sd 0:0:1:0: tag#3288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1575.387303][ C0] sd 0:0:1:0: tag#3288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1575.389070][T13042] EXT4-fs (loop4): unable to read superblock [ 1575.396316][ C0] sd 0:0:1:0: tag#3288 CDB[20]: ba [ 1575.424641][T13024] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000030000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:25 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xeffdffff00000000) 23:02:25 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1575.483163][T13042] loop4: detected capacity change from 0 to 3 [ 1575.500135][T13334] loop5: detected capacity change from 0 to 264192 [ 1575.507331][T13042] EXT4-fs (loop4): unable to read superblock 23:02:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000040000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1575.538125][T13410] loop3: detected capacity change from 0 to 131456 [ 1575.558796][ C1] sd 0:0:1:0: tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1575.568647][ C1] sd 0:0:1:0: tag#3289 CDB: opcode=0xe5 (vendor) [ 1575.571951][T13410] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:25 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='keyring\x00', r0) [ 1575.575002][ C1] sd 0:0:1:0: tag#3289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1575.590835][ C1] sd 0:0:1:0: tag#3289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1575.599880][ C1] sd 0:0:1:0: tag#3289 CDB[20]: ba [ 1575.667176][T13546] loop5: detected capacity change from 0 to 264192 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 23:02:28 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 23:02:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000050000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1578.451729][T13553] loop3: detected capacity change from 0 to 131456 [ 1578.460155][T13556] loop5: detected capacity change from 0 to 264192 [ 1578.471870][T13553] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1578.487362][ C1] sd 0:0:1:0: tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000060000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1578.497217][ C1] sd 0:0:1:0: tag#3297 CDB: opcode=0xe5 (vendor) [ 1578.503571][ C1] sd 0:0:1:0: tag#3297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1578.512633][ C1] sd 0:0:1:0: tag#3297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1578.521706][ C1] sd 0:0:1:0: tag#3297 CDB[20]: ba 23:02:28 executing program 4: socketpair(0x1d, 0x0, 0x0, &(0x7f0000001680)) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:02:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xffffffff00000000) 23:02:28 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1578.589261][T13825] loop5: detected capacity change from 0 to 264192 23:02:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:02:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000070000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1578.647803][T13890] loop3: detected capacity change from 0 to 131456 [ 1578.677129][T13890] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}, {&(0x7f00000000c0)="ea", 0x1}], 0x2}, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1578.695382][ C1] sd 0:0:1:0: tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1578.705265][ C1] sd 0:0:1:0: tag#3298 CDB: opcode=0xe5 (vendor) [ 1578.711588][ C1] sd 0:0:1:0: tag#3298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1578.720630][ C1] sd 0:0:1:0: tag#3298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1578.729689][ C1] sd 0:0:1:0: tag#3298 CDB[20]: ba 23:02:28 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080), 0x0, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000009c40)={0xffffffffffffffff}) close(r0) sendmsg(r0, 0x0, 0x0) 23:02:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 1578.777163][T14111] loop3: detected capacity change from 0 to 131456 [ 1578.792557][T14111] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1578.809071][T14137] loop5: detected capacity change from 0 to 264192 23:02:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000080000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:28 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000009c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000740)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e8c2345a5c193eea179596347802c5e1ec56bafdd5c0313f302fcf6bb6906cba5fbe8a6b911d683e25deec0581bad13bdb5e2c57e44853ade2e3395a9da1ff"}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[{0x10}, {0x10}], 0x20}, 0x0) [ 1578.889448][ C0] sd 0:0:1:0: tag#3299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1578.899319][ C0] sd 0:0:1:0: tag#3299 CDB: opcode=0xe5 (vendor) [ 1578.905665][ C0] sd 0:0:1:0: tag#3299 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1578.914708][ C0] sd 0:0:1:0: tag#3299 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1578.923760][ C0] sd 0:0:1:0: tag#3299 CDB[20]: ba [ 1578.931881][T14432] loop3: detected capacity change from 0 to 131456 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000009c40)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a0c0)=[{&(0x7f0000009d00)="db", 0x1}, {0x0}], 0x2}, 0x0) [ 1578.950769][T14432] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1578.964429][T14436] loop5: detected capacity change from 0 to 264192 23:02:28 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000090000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:28 executing program 0: syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x420000) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x8, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x5, 0x0, 0x2, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000004c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:28 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:02:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1579.033063][T14644] loop3: detected capacity change from 0 to 131456 [ 1579.060943][T14644] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1579.065956][T14651] loop5: detected capacity change from 0 to 264192 23:02:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3010164}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1579.097562][ C0] sd 0:0:1:0: tag#3300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1579.107428][ C0] sd 0:0:1:0: tag#3300 CDB: opcode=0xe5 (vendor) [ 1579.113877][ C0] sd 0:0:1:0: tag#3300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1579.122913][ C0] sd 0:0:1:0: tag#3300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1579.132064][ C0] sd 0:0:1:0: tag#3300 CDB[20]: ba 23:02:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000009c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10}, {0x10}], 0x20}, 0x0) 23:02:31 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:31 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7", 0x2d, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:31 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000a0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:31 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x105, 0x105000) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x799b, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1582.017722][T15915] loop5: detected capacity change from 0 to 264192 [ 1582.030646][T15912] loop3: detected capacity change from 0 to 131456 [ 1582.034985][ C0] sd 0:0:1:0: tag#3311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1582.047071][ C0] sd 0:0:1:0: tag#3311 CDB: opcode=0xe5 (vendor) [ 1582.053406][ C0] sd 0:0:1:0: tag#3311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:31 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000009c40)={0xffffffffffffffff}) sendmsg(r0, &(0x7f000000a140)={0x0, 0x0, &(0x7f000000a0c0)=[{&(0x7f0000009d00)="db", 0x1}, {&(0x7f0000009dc0)="1f", 0x1}], 0x2}, 0x0) 23:02:31 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000b0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1582.062455][ C0] sd 0:0:1:0: tag#3311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1582.071490][ C0] sd 0:0:1:0: tag#3311 CDB[20]: ba [ 1582.077107][T15912] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 23:02:31 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f465", 0x43, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:31 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/user\x00') 23:02:31 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12}, 0x1000) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1582.178109][T16232] loop5: detected capacity change from 0 to 264192 [ 1582.179192][T16233] loop3: detected capacity change from 0 to 131456 [ 1582.228482][ C1] sd 0:0:1:0: tag#3312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1582.238360][ C1] sd 0:0:1:0: tag#3312 CDB: opcode=0xe5 (vendor) [ 1582.244719][ C1] sd 0:0:1:0: tag#3312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1582.253842][ C1] sd 0:0:1:0: tag#3312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1582.262884][ C1] sd 0:0:1:0: tag#3312 CDB[20]: ba [ 1582.279033][T16233] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:02:34 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:34 executing program 4: perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 23:02:34 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000c0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:34 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f465", 0x43, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:34 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8971, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_names}) [ 1585.122267][T16451] loop5: detected capacity change from 0 to 264192 [ 1585.129606][T16450] loop3: detected capacity change from 0 to 131456 [ 1585.160095][ C1] sd 0:0:1:0: tag#3313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:34 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000d0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1585.170007][ C1] sd 0:0:1:0: tag#3313 CDB: opcode=0xe5 (vendor) [ 1585.176357][ C1] sd 0:0:1:0: tag#3313 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1585.185396][ C1] sd 0:0:1:0: tag#3313 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1585.194453][ C1] sd 0:0:1:0: tag#3313 CDB[20]: ba 23:02:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000000)={'team_slave_0\x00', @ifru_mtu}) 23:02:34 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1585.215810][T16450] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1585.273817][T16770] loop5: detected capacity change from 0 to 264192 [ 1585.301501][ C0] sd 0:0:1:0: tag#3314 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1585.311390][ C0] sd 0:0:1:0: tag#3314 CDB: opcode=0xe5 (vendor) [ 1585.317751][ C0] sd 0:0:1:0: tag#3314 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1585.326799][ C0] sd 0:0:1:0: tag#3314 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1585.335832][ C0] sd 0:0:1:0: tag#3314 CDB[20]: ba 23:02:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:37 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f465", 0x43, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:37 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000e0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window, @window, @mss, @timestamp], 0x4) 23:02:37 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8, 0x0, {0x2}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x105, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x42, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRESHEX], 0xe8}}], 0x2, 0x0) [ 1588.246876][T16982] loop5: detected capacity change from 0 to 264192 [ 1588.255849][T16978] loop3: detected capacity change from 0 to 131456 23:02:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:37 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000f0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:37 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100", 0x4e, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1588.305712][T16978] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:02:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f00000000c0)={'gretap0\x00', @ifru_flags}) 23:02:37 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0xa, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f00000006c0)=""/78, 0x4e}, {&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000340)=""/13, 0xd}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/193, 0xc1}, {&(0x7f0000000a40)=""/8, 0x8}, {&(0x7f0000000a80)=""/221, 0xdd}]}, &(0x7f0000000200)="e5020000004e096d35e2c735d13512d5688c434682c81ca76ffc00000000000000", 0x0, 0x2, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x1, 0x0, 0x0, 0x0, 0x20000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0xd859, 0x0, 0x0, 0x0) [ 1588.353773][T17209] loop5: detected capacity change from 0 to 264192 23:02:37 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000100000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:37 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, 0x13, 0xe592b2aaf023415b, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "fb2e1dd1"}]}, 0x54}}, 0x0) [ 1588.399378][ C0] sd 0:0:1:0: tag#3279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1588.409227][ C0] sd 0:0:1:0: tag#3279 CDB: opcode=0xe5 (vendor) [ 1588.412024][T17312] loop3: detected capacity change from 0 to 131456 [ 1588.415568][ C0] sd 0:0:1:0: tag#3279 CDB[00]: e5 02 00 00 00 4e 09 6d 35 e2 c7 35 d1 35 12 d5 [ 1588.431097][ C0] sd 0:0:1:0: tag#3279 CDB[10]: 68 8c 43 46 82 c8 1c a7 6f fc 00 00 00 00 00 00 [ 1588.440145][ C0] sd 0:0:1:0: tag#3279 CDB[20]: 00 23:02:37 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:37 executing program 4: ioprio_set$uid(0x0, 0xee01, 0x2004) [ 1588.455827][T17312] EXT4-fs (loop3): invalid first ino: 0 23:02:37 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x208400) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x7, 0x155000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffb, 0x111, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:37 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100", 0x4e, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1588.506643][T17522] loop5: detected capacity change from 0 to 264192 23:02:37 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000110000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x60bf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0], 0x1) 23:02:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:38 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1588.566531][T17733] loop3: detected capacity change from 0 to 131456 [ 1588.591556][T17733] EXT4-fs (loop3): invalid first ino: 0 [ 1588.626431][T17781] loop5: detected capacity change from 0 to 264192 [ 1588.644323][ C0] sd 0:0:1:0: tag#3280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1588.654221][ C0] sd 0:0:1:0: tag#3280 CDB: opcode=0xe5 (vendor) [ 1588.660566][ C0] sd 0:0:1:0: tag#3280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:38 executing program 4: r0 = io_uring_setup(0x1a38, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xc, 0x0, 0x0) 23:02:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:38 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100", 0x4e, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:38 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000120000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1588.669633][ C0] sd 0:0:1:0: tag#3280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1588.678673][ C0] sd 0:0:1:0: tag#3280 CDB[20]: ba 23:02:38 executing program 4: socket(0x23, 0x0, 0xfffffffb) 23:02:38 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1588.770438][T17899] loop3: detected capacity change from 0 to 131456 [ 1588.781053][T17968] loop5: detected capacity change from 0 to 264192 [ 1588.783162][T17899] EXT4-fs (loop3): invalid first ino: 0 23:02:38 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100000000000000", 0x54, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:38 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000130000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1588.831141][ C0] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1588.840995][ C0] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1588.847360][ C0] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1588.856391][ C0] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1588.865101][T18076] loop3: detected capacity change from 0 to 131456 [ 1588.865444][ C0] sd 0:0:1:0: tag#3281 CDB[20]: ba 23:02:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:38 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000002c0)='cubic\x00', 0x4) [ 1588.873201][T18076] EXT4-fs (loop3): invalid first ino: 0 23:02:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:38 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x7df880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421c, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:38 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100000000000000", 0x54, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:38 executing program 4: msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000001c0)=""/200) [ 1588.954785][T18283] loop5: detected capacity change from 0 to 264192 [ 1588.990325][T18292] loop3: detected capacity change from 0 to 131456 23:02:38 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x100) [ 1589.001546][ C1] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1589.011421][ C1] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1589.015629][T18292] EXT4-fs (loop3): invalid first ino: 0 [ 1589.017743][ C1] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1589.017765][ C1] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1589.041336][ C1] sd 0:0:1:0: tag#3282 CDB[20]: ba 23:02:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:38 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f00000000010000000100000000000000", 0x54, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1589.125843][T18498] loop3: detected capacity change from 0 to 131456 [ 1589.135774][T18498] EXT4-fs (loop3): invalid first ino: 0 23:02:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:41 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x8f, 0x0, 0x9, 0x18c009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xd, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:41 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000140000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:41 executing program 4: rt_sigaction(0xe, 0x0, 0x0, 0x8, &(0x7f00000002c0)) 23:02:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:41 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:41 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) [ 1591.922308][T18601] loop5: detected capacity change from 0 to 264192 [ 1591.943314][T18605] loop3: detected capacity change from 0 to 131456 23:02:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1591.967387][T18605] EXT4-fs (loop3): unsupported inode size: 0 [ 1591.973415][T18605] EXT4-fs (loop3): blocksize: 1024 [ 1591.992490][ C1] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1592.002366][ C1] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) [ 1592.008719][ C1] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:41 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000150000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:41 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x14a) 23:02:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:41 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) [ 1592.017815][ C1] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1592.026856][ C1] sd 0:0:1:0: tag#3283 CDB[20]: ba 23:02:41 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x40000000}, 0x1111}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x20, 0x0, 0x0, 0x0) 23:02:41 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1592.103120][T18989] loop5: detected capacity change from 0 to 264192 [ 1592.129483][T19033] loop3: detected capacity change from 0 to 131456 [ 1592.145205][T19033] EXT4-fs (loop3): unsupported inode size: 0 23:02:41 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x3a5482, 0x0) 23:02:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1592.151400][T19033] EXT4-fs (loop3): blocksize: 1024 23:02:41 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x11f300) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:41 executing program 4: setresuid(0x0, 0xffffffffffffffff, 0x0) 23:02:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x17000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:44 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000160000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:44 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b0000", 0x57, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:44 executing program 4: syz_io_uring_setup(0x506c, &(0x7f0000000240), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 23:02:44 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0xfffffffffffffcf9) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x20000090) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfb, 0x0, 0x20, 0x0, 0x0, 0x9, 0x28000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6401fb75, 0x4, @perf_config_ext={0x1, 0x6}, 0xa155, 0xfffffffffffffffe, 0x1, 0x3, 0x20004550, 0xc, 0x8, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) [ 1595.116126][T19352] loop3: detected capacity change from 0 to 131456 [ 1595.124720][T19358] loop5: detected capacity change from 0 to 264192 [ 1595.146398][T19352] EXT4-fs (loop3): unsupported inode size: 0 [ 1595.152471][T19352] EXT4-fs (loop3): blocksize: 1024 23:02:44 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000170000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:44 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1595.171057][ C0] sd 0:0:1:0: tag#3288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1595.180949][ C0] sd 0:0:1:0: tag#3288 CDB: opcode=0xe5 (vendor) [ 1595.187303][ C0] sd 0:0:1:0: tag#3288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1595.196354][ C0] sd 0:0:1:0: tag#3288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1595.205416][ C0] sd 0:0:1:0: tag#3288 CDB[20]: ba 23:02:44 executing program 4: chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) [ 1595.258395][T19601] loop5: detected capacity change from 0 to 264192 [ 1595.296945][ C0] sd 0:0:1:0: tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1595.306814][ C0] sd 0:0:1:0: tag#3289 CDB: opcode=0xe5 (vendor) [ 1595.313170][ C0] sd 0:0:1:0: tag#3289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1595.322210][ C0] sd 0:0:1:0: tag#3289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1595.331274][ C0] sd 0:0:1:0: tag#3289 CDB[20]: ba 23:02:47 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:47 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:47 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 23:02:47 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000180000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:47 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1598.250402][T19878] loop5: detected capacity change from 0 to 264192 [ 1598.259930][T19880] loop3: detected capacity change from 0 to 131456 [ 1598.291284][T19880] EXT4-fs (loop3): unsupported inode size: 0 [ 1598.297348][T19880] EXT4-fs (loop3): blocksize: 1024 [ 1598.314791][ C0] sd 0:0:1:0: tag#3290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1598.324654][ C0] sd 0:0:1:0: tag#3290 CDB: opcode=0xe5 (vendor) [ 1598.330996][ C0] sd 0:0:1:0: tag#3290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:47 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000190000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:47 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:47 executing program 4: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/53) [ 1598.340041][ C0] sd 0:0:1:0: tag#3290 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1598.349089][ C0] sd 0:0:1:0: tag#3290 CDB[20]: ba 23:02:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 23:02:47 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffe, 0x0, 0x20, @buffer={0x0, 0x14, &(0x7f0000000280)=""/20}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0xc8cd, 0x2, 0x0, 0x0) 23:02:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:47 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1598.441473][T20203] loop5: detected capacity change from 0 to 264192 [ 1598.481299][ C1] sd 0:0:1:0: tag#3291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:47 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="090000000000000066618b00028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='check=strict,iocharset=cp437']) chdir(&(0x7f0000000340)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 23:02:47 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001a0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1d000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1598.491177][ C1] sd 0:0:1:0: tag#3291 CDB: opcode=0xe5 (vendor) [ 1598.497514][ C1] sd 0:0:1:0: tag#3291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1598.506566][ C1] sd 0:0:1:0: tag#3291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1598.515603][ C1] sd 0:0:1:0: tag#3291 CDB[20]: ba [ 1598.526951][T20269] loop3: detected capacity change from 0 to 131456 [ 1598.535806][T20321] loop4: detected capacity change from 0 to 6 23:02:47 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0xfa3, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x5, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0xc07, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0, 0x2a}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1598.544255][T20269] EXT4-fs (loop3): unsupported inode size: 0 [ 1598.550249][T20269] EXT4-fs (loop3): blocksize: 1024 [ 1598.558173][T20321] FAT-fs (loop4): Directory bread(block 6) failed [ 1598.580301][T20486] loop5: detected capacity change from 0 to 264192 [ 1598.588280][T20321] FAT-fs (loop4): Directory bread(block 6) failed 23:02:47 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b000000", 0x58, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1598.601129][T20321] FAT-fs (loop4): Directory bread(block 6) failed [ 1598.608343][ C0] sd 0:0:1:0: tag#3292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1598.618188][ C0] sd 0:0:1:0: tag#3292 CDB: opcode=0xe5 (vendor) [ 1598.624516][ C0] sd 0:0:1:0: tag#3292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1598.633546][ C0] sd 0:0:1:0: tag#3292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1598.642603][ C0] sd 0:0:1:0: tag#3292 CDB[20]: ba [ 1598.682535][T20527] loop3: detected capacity change from 0 to 131456 [ 1598.696522][T20527] EXT4-fs (loop3): unsupported inode size: 0 [ 1598.702538][T20527] EXT4-fs (loop3): blocksize: 1024 23:02:50 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:50 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="090000000000000066618b00028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='check=strict,iocharset=cp437']) chdir(&(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:02:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001b0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) [ 1601.472441][T20637] loop5: detected capacity change from 0 to 264192 [ 1601.472490][T20638] loop4: detected capacity change from 0 to 6 [ 1601.487218][T20636] loop3: detected capacity change from 0 to 131456 [ 1601.511993][ C1] sd 0:0:1:0: tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:02:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001c0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1601.512428][T20638] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.521867][ C1] sd 0:0:1:0: tag#3297 CDB: opcode=0xe5 (vendor) [ 1601.528640][T20636] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1601.535568][ C1] sd 0:0:1:0: tag#3297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1601.535587][ C1] sd 0:0:1:0: tag#3297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1601.535607][ C1] sd 0:0:1:0: tag#3297 CDB[20]: ba 23:02:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="090000000000000066618b00028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='check=strict,iocharset=cp437']) chdir(&(0x7f0000000340)='./file0\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1601.575432][T20638] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.587466][T20638] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.615062][T20750] loop5: detected capacity change from 0 to 264192 23:02:50 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x5943, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:50 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:50 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001d0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1601.654746][T20957] loop4: detected capacity change from 0 to 6 [ 1601.679399][T20957] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.691187][T20961] loop3: detected capacity change from 0 to 131456 [ 1601.692048][T20957] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.705638][ C0] sd 0:0:1:0: tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1601.715493][ C0] sd 0:0:1:0: tag#3298 CDB: opcode=0xe5 (vendor) [ 1601.721851][ C0] sd 0:0:1:0: tag#3298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1601.726370][T20957] FAT-fs (loop4): Directory bread(block 6) failed [ 1601.730883][ C0] sd 0:0:1:0: tag#3298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1601.746309][ C0] sd 0:0:1:0: tag#3298 CDB[20]: ba [ 1601.752153][T20961] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1601.768608][T21009] loop5: detected capacity change from 0 to 264192 23:02:53 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) ioctl$TIOCMGET(r0, 0x5414, &(0x7f0000000100)) 23:02:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de6, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x0, 0xa}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) 23:02:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001e0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1604.595714][T21069] loop3: detected capacity change from 0 to 131456 [ 1604.609732][T21069] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1604.618837][T21114] loop5: detected capacity change from 0 to 264192 23:02:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x21000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:53 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000210000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1604.657553][ C1] sd 0:0:1:0: tag#3299 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1604.667398][ C1] sd 0:0:1:0: tag#3299 CDB: opcode=0xe5 (vendor) [ 1604.673731][ C1] sd 0:0:1:0: tag#3299 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1604.682778][ C1] sd 0:0:1:0: tag#3299 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1604.691817][ C1] sd 0:0:1:0: tag#3299 CDB[20]: ba 23:02:53 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, 0x0) 23:02:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000002840)=""/4111, 0x100f) 23:02:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x22000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:53 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080), 0x0, 0x101, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1604.768668][T21282] loop3: detected capacity change from 0 to 131456 [ 1604.769524][T21393] loop5: detected capacity change from 0 to 264192 [ 1604.818082][ C0] sd 0:0:1:0: tag#3300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1604.828034][ C0] sd 0:0:1:0: tag#3300 CDB: opcode=0xe5 (vendor) [ 1604.834414][ C0] sd 0:0:1:0: tag#3300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1604.843457][ C0] sd 0:0:1:0: tag#3300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1604.852490][ C0] sd 0:0:1:0: tag#3300 CDB[20]: ba 23:02:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:56 executing program 4: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) 23:02:56 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000220000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:56 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, 0x0) 23:02:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f00000004c0)={0x0, 0x4220, 0x20, 0x0, 0x282}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffe, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0xc7, &(0x7f00000005c0)=""/199}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8feffffff904cf12dba", 0x0, 0x2, 0x1, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:02:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1607.716102][T21608] loop3: detected capacity change from 0 to 131456 [ 1607.722076][T21611] loop5: detected capacity change from 0 to 264192 23:02:56 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x20000003, 0xb7, &(0x7f00000007c0)}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:56 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, 0x0) 23:02:56 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000230000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:56 executing program 4: perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf) 23:02:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1607.814861][ C1] sd 0:0:1:0: tag#3306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1607.824727][ C1] sd 0:0:1:0: tag#3306 CDB: opcode=0xe5 (vendor) [ 1607.831081][ C1] sd 0:0:1:0: tag#3306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1607.840118][ C1] sd 0:0:1:0: tag#3306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1607.849290][ C1] sd 0:0:1:0: tag#3306 CDB[20]: ba 23:02:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/24, 0x18}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000005080)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002d00)="ad", 0x1}], 0x1}, 0x0) 23:02:56 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x181e, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:56 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000240000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x26000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:56 executing program 3: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1607.866111][T21960] loop5: detected capacity change from 0 to 264192 [ 1607.902856][T22047] loop3: detected capacity change from 0 to 131456 23:02:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1607.941814][ C1] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1607.951687][ C1] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1607.958030][ C1] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1607.967060][ C1] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1607.976100][ C1] sd 0:0:1:0: tag#3307 CDB[20]: ba [ 1608.034318][T22418] loop5: detected capacity change from 0 to 264192 23:02:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:59 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000250000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:59 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3ffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:59 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x7df880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421c, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1610.914943][T22457] loop5: detected capacity change from 0 to 264192 [ 1610.949933][ C1] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1610.959813][ C1] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1610.966273][ C1] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1610.974628][ C0] sd 0:0:1:0: tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1610.975301][ C1] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1610.985077][ C0] sd 0:0:1:0: tag#3309 CDB: opcode=0xe5 (vendor) [ 1610.994166][ C1] sd 0:0:1:0: tag#3308 CDB[20]: ba [ 1611.000466][ C0] sd 0:0:1:0: tag#3309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:59 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000260000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:02:59 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:02:59 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4000003, 0x100000000000, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x2000, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:59 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:02:59 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x7df880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421c, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1611.014560][ C0] sd 0:0:1:0: tag#3309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1611.023578][ C0] sd 0:0:1:0: tag#3309 CDB[20]: ba 23:02:59 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1611.085164][T22850] loop5: detected capacity change from 0 to 264192 [ 1611.091861][ C0] sd 0:0:1:0: tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1611.101684][ C0] sd 0:0:1:0: tag#3310 CDB: opcode=0xe5 (vendor) [ 1611.108017][ C0] sd 0:0:1:0: tag#3310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1611.117034][ C0] sd 0:0:1:0: tag#3310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1611.126205][ C0] sd 0:0:1:0: tag#3310 CDB[20]: ba [ 1611.158760][ C1] sd 0:0:1:0: tag#3312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1611.161331][ C0] sd 0:0:1:0: tag#3311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1611.168729][ C1] sd 0:0:1:0: tag#3312 CDB: opcode=0xe5 (vendor) [ 1611.178521][ C0] sd 0:0:1:0: tag#3311 CDB: opcode=0xe5 (vendor) [ 1611.184847][ C1] sd 0:0:1:0: tag#3312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1611.191156][ C0] sd 0:0:1:0: tag#3311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1611.200157][ C1] sd 0:0:1:0: tag#3312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1611.209238][ C0] sd 0:0:1:0: tag#3311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1611.218340][ C1] sd 0:0:1:0: tag#3312 CDB[20]: ba [ 1611.227348][ C0] sd 0:0:1:0: tag#3311 CDB[20]: ba 23:03:02 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:02 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0x6f, &(0x7f00000002c0)={0x0}}, 0x40000) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:02 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x7df880) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421c, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffc, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:02 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:02 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000270000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1614.063497][T23105] loop5: detected capacity change from 0 to 264192 [ 1614.068129][ C0] sd 0:0:1:0: tag#3266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1614.079837][ C0] sd 0:0:1:0: tag#3266 CDB: opcode=0xe5 (vendor) [ 1614.086463][ C0] sd 0:0:1:0: tag#3266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1614.095531][ C0] sd 0:0:1:0: tag#3266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1614.104581][ C0] sd 0:0:1:0: tag#3266 CDB[20]: ba 23:03:02 executing program 3: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1614.142062][ C0] sd 0:0:1:0: tag#3267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1614.151924][ C0] sd 0:0:1:0: tag#3267 CDB: opcode=0xe5 (vendor) [ 1614.158270][ C0] sd 0:0:1:0: tag#3267 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1614.167306][ C0] sd 0:0:1:0: tag#3267 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1614.176378][ C0] sd 0:0:1:0: tag#3267 CDB[20]: ba 23:03:02 executing program 3: time(&(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4030014, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000025ce0000000f000000010000000000000000000000002000000020001420000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000100000001000000000000000b00000080", 0x59, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f465", 0xf, 0x8c80}], 0x0, &(0x7f0000013800)) 23:03:02 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:02 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:02 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1614.255643][T23523] loop3: detected capacity change from 0 to 131456 [ 1614.255838][ C0] sd 0:0:1:0: tag#3268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1614.272069][ C0] sd 0:0:1:0: tag#3268 CDB: opcode=0xe5 (vendor) [ 1614.278398][ C0] sd 0:0:1:0: tag#3268 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1614.287440][ C0] sd 0:0:1:0: tag#3268 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1614.296474][ C0] sd 0:0:1:0: tag#3268 CDB[20]: ba [ 1614.356385][T23523] EXT4-fs error (device loop3): ext4_fill_super:4816: inode #2: comm syz-executor.3: iget: root inode unallocated [ 1614.357598][ C0] sd 0:0:1:0: tag#3269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1614.378308][ C0] sd 0:0:1:0: tag#3269 CDB: opcode=0xe5 (vendor) [ 1614.384645][ C0] sd 0:0:1:0: tag#3269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1614.393666][ C0] sd 0:0:1:0: tag#3269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1614.402700][ C0] sd 0:0:1:0: tag#3269 CDB[20]: ba [ 1614.453827][T23523] EXT4-fs (loop3): get root inode failed [ 1614.459530][T23523] EXT4-fs (loop3): mount failed 23:03:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:05 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:05 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000280000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:05 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:05 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x11, 0x3693c0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:05 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r2, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) [ 1617.190995][T23731] loop5: detected capacity change from 0 to 264192 [ 1617.222605][ C1] sd 0:0:1:0: tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1617.225992][ C0] sd 0:0:1:0: tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1617.232543][ C1] sd 0:0:1:0: tag#3270 CDB: opcode=0xe5 (vendor) [ 1617.242511][ C0] sd 0:0:1:0: tag#3271 CDB: opcode=0xe5 (vendor) [ 1617.242529][ C0] sd 0:0:1:0: tag#3271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1617.248843][ C1] sd 0:0:1:0: tag#3270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1617.255151][ C0] sd 0:0:1:0: tag#3271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1617.264167][ C1] sd 0:0:1:0: tag#3270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:03:05 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:05 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) [ 1617.273162][ C0] sd 0:0:1:0: tag#3271 CDB[20]: ba [ 1617.282340][ C1] sd 0:0:1:0: tag#3270 CDB[20]: ba 23:03:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x59000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:05 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:05 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x0, @fd_index=0x5, 0x6, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0xa490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1617.339223][ C0] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1617.349257][ C0] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1617.355626][ C0] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1617.364675][ C0] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1617.373886][ C0] sd 0:0:1:0: tag#3272 CDB[20]: ba 23:03:06 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000290000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:06 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000000000000000000a0000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1617.422233][ C0] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1617.432081][ C0] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1617.438425][ C0] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1617.447451][ C0] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1617.456509][ C0] sd 0:0:1:0: tag#3273 CDB[20]: ba [ 1617.488059][T23998] loop3: detected capacity change from 0 to 264192 [ 1617.531391][T24169] loop5: detected capacity change from 0 to 264192 23:03:08 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:08 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x64010103}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:08 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendfile(r2, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x80000019) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000240)={0x0, 0x0, 0xffffffd9}) ptrace$cont(0x20, r4, 0x0, 0x9) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) 23:03:08 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x81, 0x44a943) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x20000000, 0xfffffffd}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:08 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000002a0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1620.334319][T24179] loop5: detected capacity change from 0 to 264192 [ 1620.366947][ C0] sd 0:0:1:0: tag#3296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1620.376814][ C0] sd 0:0:1:0: tag#3296 CDB: opcode=0xe5 (vendor) [ 1620.383162][ C0] sd 0:0:1:0: tag#3296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1620.392216][ C0] sd 0:0:1:0: tag#3296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1620.398863][ C1] sd 0:0:1:0: tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1620.401240][ C0] sd 0:0:1:0: tag#3296 CDB[20]: ba [ 1620.416213][ C1] sd 0:0:1:0: tag#3297 CDB: opcode=0xe5 (vendor) [ 1620.422535][ C1] sd 0:0:1:0: tag#3297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x87000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1620.431617][ C1] sd 0:0:1:0: tag#3297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1620.440662][ C1] sd 0:0:1:0: tag#3297 CDB[20]: ba 23:03:08 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000fe0000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:08 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x980e0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000540)={0x0, 0x9, 0x4}) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x3c, &(0x7f0000000280)=""/60}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/18, 0x12}], 0x5}}], 0x1, 0x2000, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80e0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1620.577239][T24550] loop5: detected capacity change from 0 to 264192 [ 1620.601625][ C0] sd 0:0:1:0: tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1620.611485][ C0] sd 0:0:1:0: tag#3298 CDB: opcode=0xe5 (vendor) [ 1620.617926][ C0] sd 0:0:1:0: tag#3298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1620.626967][ C0] sd 0:0:1:0: tag#3298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1620.636066][ C0] sd 0:0:1:0: tag#3298 CDB[20]: ba 23:03:11 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee", 0xb8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:11 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:11 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x39cb, &(0x7f0000000000)={0x0, 0x4221}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x501000) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bbf40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:11 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000860100000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:11 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000004020000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1623.478279][T24810] loop5: detected capacity change from 0 to 264192 [ 1623.500434][ C0] sd 0:0:1:0: tag#3300 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1623.510303][ C0] sd 0:0:1:0: tag#3300 CDB: opcode=0xe5 (vendor) [ 1623.516652][ C0] sd 0:0:1:0: tag#3300 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e0000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1623.525687][ C0] sd 0:0:1:0: tag#3300 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1623.534722][ C0] sd 0:0:1:0: tag#3300 CDB[20]: ba 23:03:11 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000e40100000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:11 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:11 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x7a05}, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1623.630458][T25122] loop5: detected capacity change from 0 to 264192 [ 1623.641949][ C1] sd 0:0:1:0: tag#3301 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1623.651804][ C1] sd 0:0:1:0: tag#3301 CDB: opcode=0xe5 (vendor) [ 1623.658133][ C1] sd 0:0:1:0: tag#3301 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1623.667187][ C1] sd 0:0:1:0: tag#3301 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:03:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1623.676343][ C1] sd 0:0:1:0: tag#3301 CDB[20]: ba 23:03:12 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x420001) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1623.772340][ C1] sd 0:0:1:0: tag#3302 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1623.782226][ C1] sd 0:0:1:0: tag#3302 CDB: opcode=0xe5 (vendor) [ 1623.788588][ C1] sd 0:0:1:0: tag#3302 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1623.797661][ C1] sd 0:0:1:0: tag#3302 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1623.806711][ C1] sd 0:0:1:0: tag#3302 CDB[20]: ba 23:03:14 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee", 0xb8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:14 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000040200000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:14 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:14 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200000) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1626.606135][T28372] loop5: detected capacity change from 0 to 264192 [ 1626.630632][ C0] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1626.640477][ C0] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1626.646797][ C0] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1626.655825][ C0] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1626.664856][ C0] sd 0:0:1:0: tag#3307 CDB[20]: ba 23:03:16 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf0000000000000000001b0200000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:16 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xb, 0xa, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:16 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1628.202604][T28804] loop3: detected capacity change from 0 to 264192 [ 1628.235709][T28806] loop5: detected capacity change from 0 to 264192 23:03:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000300000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1628.268130][ C0] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1628.278004][ C0] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1628.284383][ C0] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1628.293448][ C0] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1628.302493][ C0] sd 0:0:1:0: tag#3308 CDB[20]: ba [ 1628.328704][ C1] sd 0:0:1:0: tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1628.338551][ C1] sd 0:0:1:0: tag#3310 CDB: opcode=0xe5 (vendor) [ 1628.345018][ C1] sd 0:0:1:0: tag#3310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1628.354096][ C1] sd 0:0:1:0: tag#3310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1628.357247][ C0] sd 0:0:1:0: tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1628.363123][ C1] sd 0:0:1:0: tag#3310 CDB[20]: ba [ 1628.372910][ C0] sd 0:0:1:0: tag#3309 CDB: opcode=0xe5 (vendor) [ 1628.384309][ C0] sd 0:0:1:0: tag#3309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1628.393355][ C0] sd 0:0:1:0: tag#3309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1628.402675][ C0] sd 0:0:1:0: tag#3309 CDB[20]: ba [ 1628.463488][T29122] loop5: detected capacity change from 0 to 264192 23:03:17 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee", 0xb8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:17 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:17 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f00000004c0)={0x0, 0x421e, 0x8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x5}, 0x100}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:17 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:17 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000020400000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1629.719138][T29134] loop5: detected capacity change from 0 to 264192 [ 1629.734441][ C0] sd 0:0:1:0: tag#3311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1629.744378][ C0] sd 0:0:1:0: tag#3311 CDB: opcode=0xe5 (vendor) [ 1629.750816][ C0] sd 0:0:1:0: tag#3311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1629.759885][ C0] sd 0:0:1:0: tag#3311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:03:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1629.768936][ C0] sd 0:0:1:0: tag#3311 CDB[20]: ba 23:03:17 executing program 0: syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x90780) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xb, 0x0, 0xfffffffc) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:18 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000060400000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:18 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1629.859446][ C0] sd 0:0:1:0: tag#3312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1629.869434][ C0] sd 0:0:1:0: tag#3312 CDB: opcode=0xe5 (vendor) [ 1629.875784][ C0] sd 0:0:1:0: tag#3312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1629.884837][ C0] sd 0:0:1:0: tag#3312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1629.893869][ C0] sd 0:0:1:0: tag#3312 CDB[20]: ba 23:03:18 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x8000) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5, 0x0, 0x37}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1629.924654][ C1] sd 0:0:1:0: tag#3313 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1629.934532][ C1] sd 0:0:1:0: tag#3313 CDB: opcode=0xe5 (vendor) [ 1629.940899][ C1] sd 0:0:1:0: tag#3313 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1629.950187][ C1] sd 0:0:1:0: tag#3313 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1629.959221][ C1] sd 0:0:1:0: tag#3313 CDB[20]: ba [ 1630.014564][T29654] loop5: detected capacity change from 0 to 264192 23:03:20 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x301016400000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:20 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:20 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:20 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000500000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:20 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={0x0}}, 0x20000801) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1632.847393][T29764] loop5: detected capacity change from 0 to 264192 [ 1632.867650][ C0] sd 0:0:1:0: tag#3318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1632.873993][ C1] sd 0:0:1:0: tag#3319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1632.877527][ C0] sd 0:0:1:0: tag#3318 CDB: opcode=0xe5 (vendor) [ 1632.887350][ C1] sd 0:0:1:0: tag#3319 CDB: opcode=0xe5 (vendor) [ 1632.893670][ C0] sd 0:0:1:0: tag#3318 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1632.899991][ C1] sd 0:0:1:0: tag#3319 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1632.909088][ C0] sd 0:0:1:0: tag#3318 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1632.918091][ C1] sd 0:0:1:0: tag#3319 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1632.927107][ C0] sd 0:0:1:0: tag#3318 CDB[20]: ba [ 1632.936143][ C1] sd 0:0:1:0: tag#3319 CDB[20]: ba 23:03:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1632.948556][ C1] sd 0:0:1:0: tag#3320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1632.958643][ C1] sd 0:0:1:0: tag#3320 CDB: opcode=0xe5 (vendor) [ 1632.965039][ C1] sd 0:0:1:0: tag#3320 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1632.974221][ C1] sd 0:0:1:0: tag#3320 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1632.983267][ C1] sd 0:0:1:0: tag#3320 CDB[20]: ba 23:03:21 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000600000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:21 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x8855) r4 = socket(0x3a, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0xb1, &(0x7f00000004c0)=""/177}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0x8}, 0x4, 0x0, 0x0, 0x4, 0x0, 0x7fff}, 0x0, 0x14, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x40, 0x0, 0x0, 0x0) 23:03:21 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:21 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1633.100183][ C0] sd 0:0:1:0: tag#3322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1633.104766][T30192] loop5: detected capacity change from 0 to 264192 [ 1633.110053][ C0] sd 0:0:1:0: tag#3322 CDB: opcode=0xe5 (vendor) [ 1633.122897][ C0] sd 0:0:1:0: tag#3322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1633.132046][ C0] sd 0:0:1:0: tag#3322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1633.141069][ C0] sd 0:0:1:0: tag#3322 CDB[20]: ba [ 1633.175725][ C1] sd 0:0:1:0: tag#3323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1633.185621][ C1] sd 0:0:1:0: tag#3323 CDB: opcode=0xe5 (vendor) [ 1633.191946][ C1] sd 0:0:1:0: tag#3323 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1633.201043][ C1] sd 0:0:1:0: tag#3323 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1633.210092][ C1] sd 0:0:1:0: tag#3323 CDB[20]: ba 23:03:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:23 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:23 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:23 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000040600000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:23 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1635.983419][T30308] loop5: detected capacity change from 0 to 264192 [ 1635.991008][ C1] sd 0:0:1:0: tag#3324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1636.000867][ C1] sd 0:0:1:0: tag#3324 CDB: opcode=0xe5 (vendor) [ 1636.007224][ C1] sd 0:0:1:0: tag#3324 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1636.016263][ C1] sd 0:0:1:0: tag#3324 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1636.025412][ C1] sd 0:0:1:0: tag#3324 CDB[20]: ba [ 1636.048083][ C0] sd 0:0:1:0: tag#3326 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1636.056063][ C1] sd 0:0:1:0: tag#3325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1636.058197][ C0] sd 0:0:1:0: tag#3326 CDB: opcode=0xe5 (vendor) [ 1636.068297][ C1] sd 0:0:1:0: tag#3325 CDB: opcode=0xe5 (vendor) [ 1636.074618][ C0] sd 0:0:1:0: tag#3326 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:24 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1636.080936][ C1] sd 0:0:1:0: tag#3325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1636.089949][ C0] sd 0:0:1:0: tag#3326 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1636.098973][ C1] sd 0:0:1:0: tag#3325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1636.107998][ C0] sd 0:0:1:0: tag#3326 CDB[20]: ba [ 1636.116996][ C1] sd 0:0:1:0: tag#3325 CDB[20]: ba 23:03:24 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd_index=0x8, 0x92, 0xf08c, 0x95f, 0x7, 0x1, {0x3}}, 0x9) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1636.217020][ C0] sd 0:0:1:0: tag#3264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1636.219714][ C1] sd 0:0:1:0: tag#3327 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1636.226895][ C0] sd 0:0:1:0: tag#3264 CDB: opcode=0xe5 (vendor) [ 1636.236687][ C1] sd 0:0:1:0: tag#3327 CDB: opcode=0xe5 (vendor) [ 1636.242997][ C0] sd 0:0:1:0: tag#3264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1636.249313][ C1] sd 0:0:1:0: tag#3327 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:24 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:24 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000700000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1636.258328][ C0] sd 0:0:1:0: tag#3264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1636.267326][ C1] sd 0:0:1:0: tag#3327 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1636.276343][ C0] sd 0:0:1:0: tag#3264 CDB[20]: ba [ 1636.285377][ C1] sd 0:0:1:0: tag#3327 CDB[20]: ba [ 1636.364902][T30863] loop5: detected capacity change from 0 to 264192 23:03:27 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca", 0xd7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:27 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:27 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x0) syz_open_dev$sg(0x0, 0xfffffffffffffffc, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x5, 0x84101) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421d, 0x34}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2a, 0x800, 0xffffffff) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x404380) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x3b, 0x0, @buffer={0x0, 0x8a, &(0x7f00000004c0)=""/138}, &(0x7f0000000180)="35121c921bda40b8585ba8d47d34f3904cf12dba00000008000000000000000000d08bc8ac6154a22cecdf3d9b17d88ba6f1f460dcfb8c0a3467ee", 0x0, 0x0, 0x0, 0x1, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c044) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x259, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080), 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:27 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:27 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000900000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1639.120171][T30873] loop5: detected capacity change from 0 to 264192 [ 1639.133834][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 1639.133864][ C0] sd 0:0:1:0: tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1639.150444][ C0] sd 0:0:1:0: tag#3270 CDB: opcode=0xe5 (vendor) [ 1639.156798][ C0] sd 0:0:1:0: tag#3270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1639.165860][ C0] sd 0:0:1:0: tag#3270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1639.174898][ C0] sd 0:0:1:0: tag#3270 CDB[20]: ba [ 1639.210453][ C1] sd 0:0:1:0: tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:03:27 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x4b00) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x171881) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xaa59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x10000}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:27 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1639.220353][ C1] sd 0:0:1:0: tag#3271 CDB: opcode=0xe5 (vendor) [ 1639.226720][ C1] sd 0:0:1:0: tag#3271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1639.235778][ C1] sd 0:0:1:0: tag#3271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1639.244821][ C1] sd 0:0:1:0: tag#3271 CDB[20]: ba 23:03:27 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:27 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000a00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1639.337380][ C0] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1639.347334][ C0] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1639.353662][ C0] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1639.362698][ C0] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1639.371724][ C0] sd 0:0:1:0: tag#3272 CDB[20]: ba [ 1639.374374][ C1] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1639.386650][ C1] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1639.392994][ C1] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1639.402031][ C1] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1639.411063][ C1] sd 0:0:1:0: tag#3273 CDB[20]: ba [ 1639.457401][T31412] loop5: detected capacity change from 0 to 264192 23:03:30 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:30 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0xcf, 0x0, @scatter={0xffffffffffffffef, 0x0, 0x0}, &(0x7f00000004c0)="e5f432732f4edaa900585ba8d47d34f3904cf12dba4b03f68a584d9c000000f04ac4a67295a1d3ca7ec710793e7e78b32bfdb7d678a621e7fee6ed9eb88641f4a435b3539c09798ad65b5b5e204ec8c2a03b3d4811d061d5033c93842f910e97e10a5b4f6dad1e55af531647d40857b352dacf109ddb200fffbae95d3a8d95f0b28dcbecd9fd96d0d601c8041d98113514a799183945a0690ff5cd063510b7324431aef5f363308a89deb69094921601116bb15a6564cf297ccd5f9a6d36f29f7a5100"/207, 0x0, 0x1000, 0x1, 0x4, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:30 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:30 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:30 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000b00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1642.253889][T31424] loop5: detected capacity change from 0 to 264192 23:03:30 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000c00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:30 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:30 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1642.308689][ C1] sd 0:0:1:0: tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1642.318564][ C1] sd 0:0:1:0: tag#3274 CDB: opcode=0xe5 (vendor) [ 1642.324945][ C1] sd 0:0:1:0: tag#3274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1642.333962][ C1] sd 0:0:1:0: tag#3274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1642.343097][ C1] sd 0:0:1:0: tag#3274 CDB[20]: ba 23:03:30 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x3ab6d79fb22f0fab) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1642.407768][ C0] sd 0:0:1:0: tag#3275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1642.417622][ C0] sd 0:0:1:0: tag#3275 CDB: opcode=0xe5 (vendor) [ 1642.423947][ C0] sd 0:0:1:0: tag#3275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1642.432985][ C0] sd 0:0:1:0: tag#3275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1642.442014][ C0] sd 0:0:1:0: tag#3275 CDB[20]: ba [ 1642.449374][T31742] loop5: detected capacity change from 0 to 264192 [ 1642.500071][ C0] sd 0:0:1:0: tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1642.509937][ C0] sd 0:0:1:0: tag#3276 CDB: opcode=0xe5 (vendor) [ 1642.516272][ C0] sd 0:0:1:0: tag#3276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1642.525328][ C0] sd 0:0:1:0: tag#3276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1642.534473][ C0] sd 0:0:1:0: tag#3276 CDB[20]: ba 23:03:33 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:33 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:33 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000d00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:33 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:33 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f00000004c0)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1645.360841][T31960] loop5: detected capacity change from 0 to 264192 [ 1645.372547][ C0] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1645.382416][ C0] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1645.388785][ C0] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1645.397831][ C0] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:03:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:33 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000e00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1645.406871][ C0] sd 0:0:1:0: tag#3281 CDB[20]: ba [ 1645.419101][ C1] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1645.428947][ C1] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1645.435274][ C1] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1645.444339][ C1] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1645.453390][ C1] sd 0:0:1:0: tag#3282 CDB[20]: ba 23:03:33 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x2, 0xfffffffd) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:33 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:33 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1645.521722][ C0] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1645.531617][ C0] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) [ 1645.537954][ C0] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1645.547014][ C0] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1645.556053][ C0] sd 0:0:1:0: tag#3283 CDB[20]: ba [ 1645.592612][ C1] sd 0:0:1:0: tag#3284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1645.602493][ C1] sd 0:0:1:0: tag#3284 CDB: opcode=0xe5 (vendor) [ 1645.608823][ C1] sd 0:0:1:0: tag#3284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1645.612824][T32380] loop5: detected capacity change from 0 to 264192 [ 1645.617861][ C1] sd 0:0:1:0: tag#3284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1645.617879][ C1] sd 0:0:1:0: tag#3284 CDB[20]: ba 23:03:36 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000f00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:36 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f", 0xe6}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:36 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:36 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:36 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1648.492298][T32492] loop5: detected capacity change from 0 to 264192 23:03:36 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000201000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1648.534345][ C1] sd 0:0:1:0: tag#3285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1648.544218][ C1] sd 0:0:1:0: tag#3285 CDB: opcode=0xe5 (vendor) [ 1648.550561][ C1] sd 0:0:1:0: tag#3285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1648.559622][ C1] sd 0:0:1:0: tag#3285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1648.562355][ C0] sd 0:0:1:0: tag#3286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1648.568663][ C1] sd 0:0:1:0: tag#3285 CDB[20]: ba 23:03:36 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x7ff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:36 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1648.583638][ C0] sd 0:0:1:0: tag#3286 CDB: opcode=0xe5 (vendor) [ 1648.589963][ C0] sd 0:0:1:0: tag#3286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1648.599001][ C0] sd 0:0:1:0: tag#3286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1648.608056][ C0] sd 0:0:1:0: tag#3286 CDB[20]: ba [ 1648.659771][ C0] sd 0:0:1:0: tag#3287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1648.669705][ C0] sd 0:0:1:0: tag#3287 CDB: opcode=0xe5 (vendor) [ 1648.676061][ C0] sd 0:0:1:0: tag#3287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1648.685110][ C0] sd 0:0:1:0: tag#3287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1648.694162][ C0] sd 0:0:1:0: tag#3287 CDB[20]: ba 23:03:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:36 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:36 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1648.741569][ T393] loop5: detected capacity change from 0 to 264192 [ 1648.801975][ C1] sd 0:0:1:0: tag#3288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1648.811848][ C1] sd 0:0:1:0: tag#3288 CDB: opcode=0xe5 (vendor) [ 1648.818207][ C1] sd 0:0:1:0: tag#3288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1648.827668][ C1] sd 0:0:1:0: tag#3288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1648.836702][ C1] sd 0:0:1:0: tag#3288 CDB[20]: ba [ 1648.858706][ C0] sd 0:0:1:0: tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1648.868550][ C0] sd 0:0:1:0: tag#3289 CDB: opcode=0xe5 (vendor) [ 1648.874899][ C0] sd 0:0:1:0: tag#3289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1648.883972][ C0] sd 0:0:1:0: tag#3289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1648.893266][ C0] sd 0:0:1:0: tag#3289 CDB[20]: ba 23:03:39 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fa", 0xee}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:39 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x17, &(0x7f0000000280)=""/23}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0, 0xffffffffffffffb6}, {0x0}, {0x0}, {&(0x7f00000070c0)=""/102400, 0x2}], 0x5}}, {{&(0x7f00000004c0)=@generic, 0x0, &(0x7f0000001280)=[{&(0x7f0000002080)=""/4096}, {&(0x7f0000000100)=""/39}, {&(0x7f0000000540)=""/129}, {&(0x7f0000000600)=""/236}, {&(0x7f0000000700)=""/98}, {&(0x7f0000000340)=""/46}, {&(0x7f0000000780)=""/211}, {&(0x7f0000000880)=""/218}, {&(0x7f00000010c0)=""/132}, {&(0x7f0000001180)=""/248}], 0x0, &(0x7f0000000a00)=""/86}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/5}, {&(0x7f0000000ac0)=""/146}, {&(0x7f0000000b80)=""/206}, {&(0x7f0000000c80)=""/70}, {&(0x7f0000000d00)=""/4}], 0x0, &(0x7f0000000dc0)=""/19}, 0x3}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000003080)=""/4096}, {&(0x7f0000001040)=""/86}], 0x0, &(0x7f0000000ec0)=""/104}, 0x7}], 0x1, 0x60, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:39 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001100000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:39 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:39 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1651.596899][ T589] loop5: detected capacity change from 0 to 264192 [ 1651.626208][ C0] sd 0:0:1:0: tag#3315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1651.636108][ C0] sd 0:0:1:0: tag#3315 CDB: opcode=0xe5 (vendor) 23:03:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1651.642920][ C0] sd 0:0:1:0: tag#3315 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1651.651973][ C0] sd 0:0:1:0: tag#3315 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1651.661023][ C0] sd 0:0:1:0: tag#3315 CDB[20]: ba 23:03:39 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:39 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001200000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1651.732475][ C0] sd 0:0:1:0: tag#3316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1651.742356][ C0] sd 0:0:1:0: tag#3316 CDB: opcode=0xe5 (vendor) [ 1651.748732][ C0] sd 0:0:1:0: tag#3316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1651.757774][ C0] sd 0:0:1:0: tag#3316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1651.766808][ C0] sd 0:0:1:0: tag#3316 CDB[20]: ba 23:03:39 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:39 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1651.805418][ T953] loop5: detected capacity change from 0 to 264192 [ 1651.856868][ C1] sd 0:0:1:0: tag#3317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1651.866727][ C1] sd 0:0:1:0: tag#3317 CDB: opcode=0xe5 (vendor) [ 1651.873195][ C1] sd 0:0:1:0: tag#3317 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1651.882280][ C1] sd 0:0:1:0: tag#3317 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1651.891313][ C1] sd 0:0:1:0: tag#3317 CDB[20]: ba 23:03:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fa", 0xee}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:42 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001300000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0x8, 0x80, 0x100000001, 0x2, 0x6, 0x80000000, 0x1f3, 0x38, 0xfe, 0x401, 0x7, 0x20, 0x1, 0xaa71, 0x7fff, 0xd3f0}, [{0x6474e551, 0x3221, 0x7b, 0xcc9b, 0x6b4, 0x0, 0x400, 0x1140}, {0x1, 0x0, 0x3, 0x1, 0x6, 0x5c, 0x81, 0x7}], "4403c3c806ae58000c1660deff8b76624bd449126c50ac903d53043140424ea0cab4710e691ddc70751d382562457984802e80ed5abf7c740d559322109dec67292e36bc574428f078c05b129680244876fa1cdeb7f75eac1909569e3494", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5d6) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r1, 0x0, 0xfffffffffffffcbb) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x421c}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9a9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x40003000, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:42 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:42 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1654.759340][ T1128] loop5: detected capacity change from 0 to 264192 [ 1654.767502][ C0] sd 0:0:1:0: tag#3318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1654.774836][ C1] sd 0:0:1:0: tag#3319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1654.777335][ C0] sd 0:0:1:0: tag#3318 CDB: opcode=0xe5 (vendor) [ 1654.787124][ C1] sd 0:0:1:0: tag#3319 CDB: opcode=0xe5 (vendor) [ 1654.793424][ C0] sd 0:0:1:0: tag#3318 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:03:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1654.799736][ C1] sd 0:0:1:0: tag#3319 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1654.808735][ C0] sd 0:0:1:0: tag#3318 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1654.817759][ C1] sd 0:0:1:0: tag#3319 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1654.826763][ C0] sd 0:0:1:0: tag#3318 CDB[20]: ba [ 1654.835776][ C1] sd 0:0:1:0: tag#3319 CDB[20]: ba 23:03:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x2de7, &(0x7f00000004c0)={0x0, 0x4220, 0x0, 0x0, 0x2, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:42 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:42 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:42 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001400000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1654.937054][ C0] sd 0:0:1:0: tag#3320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1654.946942][ C0] sd 0:0:1:0: tag#3320 CDB: opcode=0xe5 (vendor) [ 1654.953285][ C0] sd 0:0:1:0: tag#3320 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1654.962406][ C0] sd 0:0:1:0: tag#3320 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1654.971467][ C0] sd 0:0:1:0: tag#3320 CDB[20]: ba [ 1655.002162][ C0] sd 0:0:1:0: tag#3321 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1655.012022][ C0] sd 0:0:1:0: tag#3321 CDB: opcode=0xe5 (vendor) [ 1655.018350][ C0] sd 0:0:1:0: tag#3321 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1655.027409][ C0] sd 0:0:1:0: tag#3321 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1655.037736][ C0] sd 0:0:1:0: tag#3321 CDB[20]: ba [ 1655.077077][ T1651] loop5: detected capacity change from 0 to 264192 23:03:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fa", 0xee}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:45 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x2346c0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x5, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000540)=""/68, 0x44}], 0x3, 0x10}, 0xffffffff) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x8012, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0, 0x38}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x3, 0x0, 0x0) 23:03:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:45 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:45 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001500000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:45 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1657.965398][ C1] sd 0:0:1:0: tag#3276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1657.975258][ C1] sd 0:0:1:0: tag#3276 CDB: opcode=0xe5 (vendor) [ 1657.980115][ C0] sd 0:0:1:0: tag#3277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1657.981597][ C1] sd 0:0:1:0: tag#3276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1657.991397][ C0] sd 0:0:1:0: tag#3277 CDB: opcode=0xe5 (vendor) [ 1658.000394][ C1] sd 0:0:1:0: tag#3276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1658.006699][ C0] sd 0:0:1:0: tag#3277 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1658.015784][ C1] sd 0:0:1:0: tag#3276 CDB[20]: ba [ 1658.024821][ C0] sd 0:0:1:0: tag#3277 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1658.032715][ T1662] loop5: detected capacity change from 0 to 264192 [ 1658.038975][ C0] sd 0:0:1:0: tag#3277 CDB[20]: ba 23:03:45 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000008800)=ANY=[@ANYBLOB="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"]) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f000000e640)=[{{&(0x7f00000004c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000540)=""/190, 0xbe}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000640)=""/107, 0x6b}, {&(0x7f0000004500)=""/4096, 0x1000}], 0x7, &(0x7f0000000740)=""/88, 0x58}, 0x2}, {{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000007c0)=""/90, 0x5a}, 0x3f}, {{&(0x7f0000000840)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/169, 0xa9}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000006500)=""/4096, 0x1000}], 0x5, &(0x7f0000000b40)=""/32, 0x20}, 0x8}, {{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000000c80)=""/213, 0xd5}, {&(0x7f0000000d80)=""/86, 0x56}, {&(0x7f0000000e00)=""/147, 0x93}, {&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000000f80)=""/36, 0x24}, {&(0x7f0000000fc0)=""/59, 0x3b}, {&(0x7f0000007500)=""/4096, 0x1000}], 0x8, &(0x7f0000001080)=""/224, 0xe0}, 0x5}, {{0x0, 0x0, &(0x7f0000008700)=[{&(0x7f0000001180)=""/175, 0xaf}, {&(0x7f0000001240)=""/5, 0x5}, {&(0x7f000000e8c0)=""/238, 0xee}, {&(0x7f0000001380)=""/204, 0xcc}, {&(0x7f0000008500)=""/197, 0xc5}, {&(0x7f0000008600)=""/253, 0xfd}], 0x6}, 0x3}, {{&(0x7f0000008780)=@caif=@rfm, 0x80, &(0x7f0000009980), 0x0, &(0x7f0000009a00)=""/176, 0xb0}, 0xd}, {{&(0x7f0000009ac0)=@generic, 0x80, &(0x7f000000ad80)=[{&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000009c40)}, {&(0x7f0000009c80)=""/4096, 0x1000}, {&(0x7f000000ac80)=""/194, 0xc2}], 0x4, &(0x7f000000adc0)=""/19, 0x13}, 0xc155}, {{&(0x7f000000ae00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f000000be80)=[{&(0x7f000000ae80)=""/4096, 0x1000}], 0x1, &(0x7f000000bec0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f000000e1c0)=[{&(0x7f000000cec0)=""/101, 0x65}, {&(0x7f000000cf40)=""/195, 0xc3}, {&(0x7f000000d040)=""/4096, 0x1000}, {&(0x7f000000e040)=""/65, 0x41}, {&(0x7f000000e0c0)=""/189, 0xbd}, {&(0x7f000000e180)=""/42, 0x2a}], 0x6, &(0x7f000000e240)=""/210, 0xd2}, 0x8}, {{&(0x7f000000e340)=@can, 0x80, &(0x7f000000e600)=[{&(0x7f000000e3c0)=""/45, 0x2d}, {&(0x7f000000e400)=""/167, 0xa7}, {&(0x7f000000e4c0)=""/43, 0x2b}, {&(0x7f000000e500)=""/254, 0xfe}], 0x4}, 0x80000000}], 0xa, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:45 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:45 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:45 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001600000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1658.156347][ C0] sd 0:0:1:0: tag#3278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1658.166295][ C0] sd 0:0:1:0: tag#3278 CDB: opcode=0xe5 (vendor) [ 1658.172633][ C0] sd 0:0:1:0: tag#3278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1658.181676][ C0] sd 0:0:1:0: tag#3278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1658.190802][ C0] sd 0:0:1:0: tag#3278 CDB[20]: ba [ 1658.217096][ C0] sd 0:0:1:0: tag#3279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1658.226956][ C0] sd 0:0:1:0: tag#3279 CDB: opcode=0xe5 (vendor) [ 1658.233288][ C0] sd 0:0:1:0: tag#3279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1658.242329][ C0] sd 0:0:1:0: tag#3279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1658.251389][ C0] sd 0:0:1:0: tag#3279 CDB[20]: ba [ 1658.337380][ T2180] loop5: detected capacity change from 0 to 264192 23:03:48 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:48 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:48 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000340)=""/53, 0x35}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000700)=""/181, 0xb5}], 0x7, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2fe, 0x4, 0x0, 0x0, 0x0) 23:03:48 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001700000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1661.083132][ T2182] loop5: detected capacity change from 0 to 264192 [ 1661.101267][ C0] sd 0:0:1:0: tag#3280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1661.111110][ C0] sd 0:0:1:0: tag#3280 CDB: opcode=0xe5 (vendor) [ 1661.117460][ C0] sd 0:0:1:0: tag#3280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1661.126505][ C0] sd 0:0:1:0: tag#3280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1661.135571][ C0] sd 0:0:1:0: tag#3280 CDB[20]: ba [ 1661.139861][ C1] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1661.150540][ C1] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1661.156979][ C1] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1661.166016][ C1] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1661.175061][ C1] sd 0:0:1:0: tag#3281 CDB[20]: ba 23:03:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:48 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @scatter={0x5, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000700)=""/119, 0x77}]}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x10, 0x8000000, 0x4001e3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x2, 0x0, 0x0) 23:03:48 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:48 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1661.274192][ C1] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1661.284300][ C1] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1661.290657][ C1] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1661.299692][ C1] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1661.308722][ C1] sd 0:0:1:0: tag#3282 CDB[20]: ba 23:03:48 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x805, 0x0, 0xfffffffc, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x10}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1661.329005][ C1] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1661.338873][ C1] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) [ 1661.345240][ C1] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1661.354308][ C1] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1661.363381][ C1] sd 0:0:1:0: tag#3283 CDB[20]: ba [ 1661.437857][ C0] sd 0:0:1:0: tag#3284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1661.447804][ C0] sd 0:0:1:0: tag#3284 CDB: opcode=0xe5 (vendor) [ 1661.454155][ C0] sd 0:0:1:0: tag#3284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1661.463203][ C0] sd 0:0:1:0: tag#3284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1661.472245][ C0] sd 0:0:1:0: tag#3284 CDB[20]: ba 23:03:51 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:51 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2100000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:51 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001800000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:51 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:51 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffc, 0x0, 0x1b, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x28000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/2, 0x2}], 0x5}}], 0x1, 0x40000000, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:51 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1664.223408][ C1] sd 0:0:1:0: tag#3289 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1664.224143][ T2821] loop5: detected capacity change from 0 to 264192 [ 1664.233268][ C1] sd 0:0:1:0: tag#3289 CDB: opcode=0xe5 (vendor) [ 1664.233287][ C1] sd 0:0:1:0: tag#3289 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1664.233303][ C1] sd 0:0:1:0: tag#3289 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1664.233337][ C1] sd 0:0:1:0: tag#3289 CDB[20]: ba 23:03:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2200000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1664.256262][ C1] sd 0:0:1:0: tag#3290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1664.280470][ C1] sd 0:0:1:0: tag#3290 CDB: opcode=0xe5 (vendor) [ 1664.286821][ C1] sd 0:0:1:0: tag#3290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1664.295856][ C1] sd 0:0:1:0: tag#3290 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1664.304889][ C1] sd 0:0:1:0: tag#3290 CDB[20]: ba 23:03:51 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2300000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1664.366047][ C1] sd 0:0:1:0: tag#3291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1664.375922][ C1] sd 0:0:1:0: tag#3291 CDB: opcode=0xe5 (vendor) [ 1664.382310][ C1] sd 0:0:1:0: tag#3291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1664.390499][ C0] sd 0:0:1:0: tag#3292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1664.391360][ C1] sd 0:0:1:0: tag#3291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1664.401146][ C0] sd 0:0:1:0: tag#3292 CDB: opcode=0xe5 (vendor) 23:03:51 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:51 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1664.410150][ C1] sd 0:0:1:0: tag#3291 CDB[20]: ba [ 1664.416466][ C0] sd 0:0:1:0: tag#3292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1664.430556][ C0] sd 0:0:1:0: tag#3292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1664.439609][ C0] sd 0:0:1:0: tag#3292 CDB[20]: ba [ 1664.520408][ C0] sd 0:0:1:0: tag#3293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1664.530268][ C0] sd 0:0:1:0: tag#3293 CDB: opcode=0xe5 (vendor) [ 1664.536603][ C0] sd 0:0:1:0: tag#3293 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1664.545637][ C0] sd 0:0:1:0: tag#3293 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1664.554669][ C0] sd 0:0:1:0: tag#3293 CDB[20]: ba 23:03:54 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000600)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:54 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001900000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:03:54 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1667.342712][ T3249] loop5: detected capacity change from 0 to 264192 [ 1667.354318][ C1] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1667.364722][ C1] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1667.371064][ C1] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1667.379898][ C0] sd 0:0:1:0: tag#3308 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 23:03:54 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1667.380100][ C1] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1667.389901][ C0] sd 0:0:1:0: tag#3308 CDB: opcode=0xe5 (vendor) [ 1667.398888][ C1] sd 0:0:1:0: tag#3307 CDB[20]: ba [ 1667.405194][ C0] sd 0:0:1:0: tag#3308 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1667.419281][ C0] sd 0:0:1:0: tag#3308 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1667.428419][ C0] sd 0:0:1:0: tag#3308 CDB[20]: ba 23:03:54 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd=r1, 0x8a, 0x0, 0x0, 0x4, 0x0, {0x10}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:54 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1667.529652][ C0] sd 0:0:1:0: tag#3309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1667.539519][ C0] sd 0:0:1:0: tag#3309 CDB: opcode=0xe5 (vendor) [ 1667.545884][ C0] sd 0:0:1:0: tag#3309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1667.555015][ C0] sd 0:0:1:0: tag#3309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1667.555954][ C1] sd 0:0:1:0: tag#3310 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1667.564049][ C0] sd 0:0:1:0: tag#3309 CDB[20]: ba [ 1667.573846][ C1] sd 0:0:1:0: tag#3310 CDB: opcode=0xe5 (vendor) [ 1667.585249][ C1] sd 0:0:1:0: tag#3310 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1667.594268][ C1] sd 0:0:1:0: tag#3310 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1667.603310][ C1] sd 0:0:1:0: tag#3310 CDB[20]: ba 23:03:57 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51ea", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:03:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001a00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1670.468381][ T3698] loop5: detected capacity change from 0 to 264192 [ 1670.482381][ C0] sd 0:0:1:0: tag#3315 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1670.491209][ C1] sd 0:0:1:0: tag#3316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1670.492245][ C0] sd 0:0:1:0: tag#3315 CDB: opcode=0xe5 (vendor) [ 1670.502038][ C1] sd 0:0:1:0: tag#3316 CDB: opcode=0xe5 (vendor) [ 1670.508339][ C0] sd 0:0:1:0: tag#3315 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1670.514730][ C1] sd 0:0:1:0: tag#3316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1670.523740][ C0] sd 0:0:1:0: tag#3315 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1670.532750][ C1] sd 0:0:1:0: tag#3316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1670.541747][ C0] sd 0:0:1:0: tag#3315 CDB[20]: ba [ 1670.550742][ C1] sd 0:0:1:0: tag#3316 CDB[20]: ba 23:03:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x2deb, &(0x7f0000000000)={0x0, 0x4220, 0x0, 0x2}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x5d, &(0x7f0000000340)=[r0, 0xffffffffffffffff, r1, r2], 0x4, 0x0, 0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:03:57 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:03:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1670.677877][ C1] sd 0:0:1:0: tag#3317 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1670.687729][ C1] sd 0:0:1:0: tag#3317 CDB: opcode=0xe5 (vendor) [ 1670.694072][ C1] sd 0:0:1:0: tag#3317 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1670.703131][ C1] sd 0:0:1:0: tag#3317 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1670.712175][ C1] sd 0:0:1:0: tag#3317 CDB[20]: ba 23:03:57 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x8c4) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001540)={0x53, 0xfffffffffffffffc, 0x1000, 0x6, @scatter={0x1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/128, 0x80}]}, &(0x7f00000004c0)="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", &(0x7f0000000280)=""/7, 0x10000, 0x10000, 0x1, &(0x7f0000001500)}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1670.740131][ C0] sd 0:0:1:0: tag#3318 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1670.749976][ C0] sd 0:0:1:0: tag#3318 CDB: opcode=0xe5 (vendor) [ 1670.756318][ C0] sd 0:0:1:0: tag#3318 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1670.765349][ C0] sd 0:0:1:0: tag#3318 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1670.774374][ C0] sd 0:0:1:0: tag#3318 CDB[20]: ba 23:04:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51ea", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001b00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:00 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:00 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000640)={0x0, 0x521a, 0x0, 0x0, 0x320}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x23, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0xfffffffe) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0xf9, &(0x7f00000004c0)=""/249}, &(0x7f0000000280)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1673.580187][ T4406] loop5: detected capacity change from 0 to 264192 [ 1673.581164][ C0] sd 0:0:1:0: tag#3319 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1673.596565][ C0] sd 0:0:1:0: tag#3319 CDB: opcode=0xe5 (vendor) [ 1673.602897][ C0] sd 0:0:1:0: tag#3319 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1673.611953][ C0] sd 0:0:1:0: tag#3319 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1673.620996][ C0] sd 0:0:1:0: tag#3319 CDB[20]: ba 23:04:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51ea", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:00 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000021b00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1673.755632][ T4723] loop5: detected capacity change from 0 to 264192 [ 1673.761963][ C0] sd 0:0:1:0: tag#3321 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1673.772009][ C0] sd 0:0:1:0: tag#3321 CDB: opcode=0xe5 (vendor) [ 1673.778334][ C0] sd 0:0:1:0: tag#3321 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1673.787464][ C0] sd 0:0:1:0: tag#3321 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1673.796538][ C0] sd 0:0:1:0: tag#3321 CDB[20]: ba 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001c00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:00 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d00000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1673.924909][ T4900] loop5: detected capacity change from 0 to 264192 [ 1673.952793][ C1] sd 0:0:1:0: tag#3327 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1673.962663][ C1] sd 0:0:1:0: tag#3327 CDB: opcode=0xe5 (vendor) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5900000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1673.969049][ C1] sd 0:0:1:0: tag#3327 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1673.978112][ C1] sd 0:0:1:0: tag#3327 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1673.987258][ C1] sd 0:0:1:0: tag#3327 CDB[20]: ba 23:04:00 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001d00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:00 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:00 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:01 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1674.148056][ T5146] loop5: detected capacity change from 0 to 264192 [ 1674.156225][ C0] sd 0:0:1:0: tag#3264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1674.166102][ C0] sd 0:0:1:0: tag#3264 CDB: opcode=0xe5 (vendor) [ 1674.172460][ C0] sd 0:0:1:0: tag#3264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1674.181517][ C0] sd 0:0:1:0: tag#3264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1674.190585][ C0] sd 0:0:1:0: tag#3264 CDB[20]: ba 23:04:03 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001e00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:03 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:03 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:03 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8700000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x4, 0x4000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x1f, @buffer={0x0, 0xfffffffffffffe7e, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0}) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x20, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000055340)={0x100, [], 0x7, "9a174b22814d12"}) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1676.858437][ C1] sd 0:0:1:0: tag#3269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1676.868300][ C1] sd 0:0:1:0: tag#3269 CDB: opcode=0xe5 (vendor) [ 1676.874688][ C1] sd 0:0:1:0: tag#3269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1676.883725][ C1] sd 0:0:1:0: tag#3269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1676.892783][ C1] sd 0:0:1:0: tag#3269 CDB[20]: ba 23:04:03 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1676.912493][ T5232] loop5: detected capacity change from 0 to 264192 23:04:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x980e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:03 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:03 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4004, @fd_index=0x1, 0xfff, 0x0, 0x0, 0x10, 0x0, {0x3}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:03 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb80e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:03 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000001f00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1677.051866][ C0] sd 0:0:1:0: tag#3270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1677.061731][ C0] sd 0:0:1:0: tag#3270 CDB: opcode=0xe5 (vendor) [ 1677.068074][ C0] sd 0:0:1:0: tag#3270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1677.077113][ C0] sd 0:0:1:0: tag#3270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1677.086140][ C0] sd 0:0:1:0: tag#3270 CDB[20]: ba 23:04:03 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1677.130933][ C0] sd 0:0:1:0: tag#3271 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1677.140793][ C0] sd 0:0:1:0: tag#3271 CDB: opcode=0xe5 (vendor) [ 1677.147132][ C0] sd 0:0:1:0: tag#3271 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1677.156176][ C0] sd 0:0:1:0: tag#3271 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1677.165231][ C0] sd 0:0:1:0: tag#3271 CDB[20]: ba [ 1677.240777][ T5751] loop5: detected capacity change from 0 to 264192 23:04:06 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:06 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:06 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x202600) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:06 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:06 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1679.967541][ C0] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1679.977408][ C0] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1679.983771][ C0] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1679.992791][ C0] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1679.994449][ C1] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1680.001819][ C0] sd 0:0:1:0: tag#3272 CDB[20]: ba [ 1680.011614][ C1] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1680.023036][ C1] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1680.032108][ C1] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1680.041145][ C1] sd 0:0:1:0: tag#3273 CDB[20]: ba [ 1680.046973][ T5766] loop5: detected capacity change from 0 to 264192 23:04:06 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10, 0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:06 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000102000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc07e000000000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:06 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:06 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1680.145670][ T5977] loop5: detected capacity change from 0 to 264192 23:04:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1680.209243][ C0] sd 0:0:1:0: tag#3274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1680.219100][ C0] sd 0:0:1:0: tag#3274 CDB: opcode=0xe5 (vendor) [ 1680.225457][ C0] sd 0:0:1:0: tag#3274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1680.234506][ C0] sd 0:0:1:0: tag#3274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1680.243601][ C0] sd 0:0:1:0: tag#3274 CDB[20]: ba 23:04:09 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f00000004c0)={0x0, 0x4220, 0x20}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd=r0, 0x0, &(0x7f00000007c0), 0x0, 0xb}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3f}, 0x10802, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:09 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:09 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002100000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:09 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:09 executing program 4: syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1683.106608][ T6295] loop5: detected capacity change from 0 to 264192 [ 1683.117688][ C0] sd 0:0:1:0: tag#3279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1683.127523][ C0] sd 0:0:1:0: tag#3279 CDB: opcode=0xe5 (vendor) [ 1683.133878][ C0] sd 0:0:1:0: tag#3279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1683.142931][ C0] sd 0:0:1:0: tag#3279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1683.151999][ C0] sd 0:0:1:0: tag#3279 CDB[20]: ba 23:04:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1683.185760][ C1] sd 0:0:1:0: tag#3280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1683.195617][ C1] sd 0:0:1:0: tag#3280 CDB: opcode=0xe5 (vendor) [ 1683.201974][ C1] sd 0:0:1:0: tag#3280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1683.211014][ C1] sd 0:0:1:0: tag#3280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1683.220079][ C1] sd 0:0:1:0: tag#3280 CDB[20]: ba 23:04:09 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x19d400) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0xfffffe59, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220, 0x4, 0x0, 0x44}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x40000000, 0x80000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:09 executing program 4: syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1683.310336][ C0] sd 0:0:1:0: tag#3281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1683.320189][ C0] sd 0:0:1:0: tag#3281 CDB: opcode=0xe5 (vendor) [ 1683.321806][ C1] sd 0:0:1:0: tag#3282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1683.326533][ C0] sd 0:0:1:0: tag#3281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1683.326551][ C0] sd 0:0:1:0: tag#3281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 23:04:09 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002200000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:09 executing program 3: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1683.336336][ C1] sd 0:0:1:0: tag#3282 CDB: opcode=0xe5 (vendor) [ 1683.345341][ C0] sd 0:0:1:0: tag#3281 CDB[20]: ba [ 1683.354874][ C1] sd 0:0:1:0: tag#3282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1683.375280][ C1] sd 0:0:1:0: tag#3282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1683.384325][ C1] sd 0:0:1:0: tag#3282 CDB[20]: ba 23:04:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1683.506102][ T6930] loop5: detected capacity change from 0 to 264192 23:04:12 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:12 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:12 executing program 4: syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:12 executing program 3: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:12 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002300000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1686.231267][ T6933] loop5: detected capacity change from 0 to 264192 [ 1686.243432][ C0] sd 0:0:1:0: tag#3283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1686.253279][ C0] sd 0:0:1:0: tag#3283 CDB: opcode=0xe5 (vendor) [ 1686.259613][ C0] sd 0:0:1:0: tag#3283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1686.268639][ C0] sd 0:0:1:0: tag#3283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1686.277685][ C0] sd 0:0:1:0: tag#3283 CDB[20]: ba 23:04:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:12 executing program 3: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1686.316251][ C0] sd 0:0:1:0: tag#3284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1686.326100][ C0] sd 0:0:1:0: tag#3284 CDB: opcode=0xe5 (vendor) [ 1686.332438][ C0] sd 0:0:1:0: tag#3284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1686.341472][ C0] sd 0:0:1:0: tag#3284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1686.350510][ C0] sd 0:0:1:0: tag#3284 CDB[20]: ba 23:04:12 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x66ac, &(0x7f0000000000)={0x0, 0x1004220, 0x20, 0x0, 0x83}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40044) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x69402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fffffff}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:12 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002400000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:12 executing program 4: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1686.437884][ C0] sd 0:0:1:0: tag#3285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1686.447739][ C0] sd 0:0:1:0: tag#3285 CDB: opcode=0xe5 (vendor) [ 1686.454059][ C0] sd 0:0:1:0: tag#3285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1686.463095][ C0] sd 0:0:1:0: tag#3285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1686.472159][ C0] sd 0:0:1:0: tag#3285 CDB[20]: ba [ 1686.494131][ C0] sd 0:0:1:0: tag#3286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1686.503994][ C0] sd 0:0:1:0: tag#3286 CDB: opcode=0xe5 (vendor) [ 1686.510338][ C0] sd 0:0:1:0: tag#3286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1686.519399][ C0] sd 0:0:1:0: tag#3286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1686.528449][ C0] sd 0:0:1:0: tag#3286 CDB[20]: ba [ 1686.535287][ T7466] loop5: detected capacity change from 0 to 264192 23:04:15 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:15 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, 0x10}, 0x400) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:15 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:15 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002500000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:15 executing program 4: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1689.360102][ T7470] loop5: detected capacity change from 0 to 264192 [ 1689.377273][ C1] sd 0:0:1:0: tag#3291 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1689.387121][ C1] sd 0:0:1:0: tag#3291 CDB: opcode=0xe5 (vendor) [ 1689.391273][ C0] sd 0:0:1:0: tag#3292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1689.393473][ C1] sd 0:0:1:0: tag#3291 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1689.403291][ C0] sd 0:0:1:0: tag#3292 CDB: opcode=0xe5 (vendor) [ 1689.412284][ C1] sd 0:0:1:0: tag#3291 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1689.418577][ C0] sd 0:0:1:0: tag#3292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1689.427944][ C1] sd 0:0:1:0: tag#3291 CDB[20]: ba [ 1689.436953][ C0] sd 0:0:1:0: tag#3292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1689.451027][ C0] sd 0:0:1:0: tag#3292 CDB[20]: ba 23:04:15 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x2004, @fd_index=0x5, 0xff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001500)=""/197, 0xc5}, {&(0x7f0000001600)=""/89, 0x59}, {&(0x7f0000001680)=""/160, 0xa0}], 0x4, 0x1, 0x1}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x3, 0x0, 0x0, 0x0) 23:04:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:16 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:16 executing program 4: syz_open_dev$loop(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1689.564885][ C0] sd 0:0:1:0: tag#3293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1689.574777][ C0] sd 0:0:1:0: tag#3293 CDB: opcode=0xe5 (vendor) [ 1689.581132][ C0] sd 0:0:1:0: tag#3293 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1689.590158][ C0] sd 0:0:1:0: tag#3293 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1689.599193][ C0] sd 0:0:1:0: tag#3293 CDB[20]: ba 23:04:16 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002600000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1689.634711][ C0] sd 0:0:1:0: tag#3294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1689.644560][ C0] sd 0:0:1:0: tag#3294 CDB: opcode=0xe5 (vendor) [ 1689.650912][ C0] sd 0:0:1:0: tag#3294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1689.659962][ C0] sd 0:0:1:0: tag#3294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1689.668992][ C0] sd 0:0:1:0: tag#3294 CDB[20]: ba [ 1689.743067][ T7997] loop5: detected capacity change from 0 to 264192 23:04:18 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:18 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x59, 0x10100) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:18 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:18 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:18 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002700000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1692.483769][ C1] sd 0:0:1:0: tag#3295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1692.493710][ C1] sd 0:0:1:0: tag#3295 CDB: opcode=0xe5 (vendor) [ 1692.500086][ C1] sd 0:0:1:0: tag#3295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1692.506986][ C0] sd 0:0:1:0: tag#3296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1692.509116][ C1] sd 0:0:1:0: tag#3295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1692.518901][ C0] sd 0:0:1:0: tag#3296 CDB: opcode=0xe5 (vendor) 23:04:18 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1692.527902][ C1] sd 0:0:1:0: tag#3295 CDB[20]: ba [ 1692.534203][ C0] sd 0:0:1:0: tag#3296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1692.534221][ C0] sd 0:0:1:0: tag#3296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1692.539855][ T8019] loop5: detected capacity change from 0 to 264192 [ 1692.548333][ C0] sd 0:0:1:0: tag#3296 CDB[20]: ba 23:04:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:18 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002800000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:18 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1692.696891][ T8027] ================================================================== [ 1692.704989][ T8027] BUG: KCSAN: data-race in io_clean_op / kiocb_done [ 1692.711576][ T8027] [ 1692.713887][ T8027] write to 0xffff888149451f58 of 4 bytes by task 8017 on cpu 1: [ 1692.721521][ T8027] io_clean_op+0x3aa/0x3e0 [ 1692.725950][ T8027] io_req_task_complete+0xb2/0x1e0 [ 1692.731059][ T8027] tctx_task_work+0x275/0x4d0 [ 1692.735724][ T8027] task_work_run+0xae/0x130 [ 1692.740256][ T8027] exit_to_user_mode_prepare+0xf8/0x190 [ 1692.745803][ T8027] syscall_exit_to_user_mode+0x20/0x40 [ 1692.751258][ T8027] do_syscall_64+0x50/0xa0 [ 1692.755678][ T8027] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1692.761570][ T8027] [ 1692.763879][ T8027] read to 0xffff888149451f58 of 4 bytes by task 8027 on cpu 0: [ 1692.771415][ T8027] kiocb_done+0x1c4/0x710 [ 1692.775740][ T8027] io_issue_sqe+0x3df5/0x67b0 [ 1692.780502][ T8027] io_wq_submit_work+0xf5/0x2c0 [ 1692.785348][ T8027] io_worker_handle_work+0x788/0xa20 [ 1692.790627][ T8027] io_wqe_worker+0x1b9/0x540 23:04:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1692.795396][ T8027] ret_from_fork+0x1f/0x30 [ 1692.799810][ T8027] [ 1692.802134][ T8027] value changed: 0x000c0100 -> 0x00090100 [ 1692.807833][ T8027] [ 1692.810139][ T8027] Reported by Kernel Concurrency Sanitizer on: [ 1692.816284][ T8027] CPU: 0 PID: 8027 Comm: iou-wrk-8017 Not tainted 5.15.0-rc6-syzkaller #0 [ 1692.824768][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.834813][ T8027] ================================================================== 23:04:19 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1692.885724][ T8448] loop5: detected capacity change from 0 to 264192 23:04:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:19 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:19 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002900000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:19 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0xccb, 0x400000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffc, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/92, 0x5c}], 0x2, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1693.052270][ T8758] loop5: detected capacity change from 0 to 264192 [ 1693.064681][ C0] sd 0:0:1:0: tag#3297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1693.074522][ C0] sd 0:0:1:0: tag#3297 CDB: opcode=0xe5 (vendor) [ 1693.078450][ C1] sd 0:0:1:0: tag#3298 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1693.080902][ C0] sd 0:0:1:0: tag#3297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1693.080921][ C0] sd 0:0:1:0: tag#3297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1693.090821][ C1] sd 0:0:1:0: tag#3298 CDB: opcode=0xe5 (vendor) [ 1693.099829][ C0] sd 0:0:1:0: tag#3297 CDB[20]: ba [ 1693.108836][ C1] sd 0:0:1:0: tag#3298 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1693.129242][ C1] sd 0:0:1:0: tag#3298 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1693.138289][ C1] sd 0:0:1:0: tag#3298 CDB[20]: ba 23:04:21 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:21 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x1004220, 0x23}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:21 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:21 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:21 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000002a00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1695.756024][ T8978] loop5: detected capacity change from 0 to 264192 [ 1695.766538][ C0] sd 0:0:1:0: tag#3303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1695.776567][ C0] sd 0:0:1:0: tag#3303 CDB: opcode=0xe5 (vendor) [ 1695.780954][ C1] sd 0:0:1:0: tag#3304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1695.782921][ C0] sd 0:0:1:0: tag#3303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 23:04:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1695.792712][ C1] sd 0:0:1:0: tag#3304 CDB: opcode=0xe5 (vendor) [ 1695.801706][ C0] sd 0:0:1:0: tag#3303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1695.808022][ C1] sd 0:0:1:0: tag#3304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1695.808051][ C1] sd 0:0:1:0: tag#3304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1695.817055][ C0] sd 0:0:1:0: tag#3303 CDB[20]: ba [ 1695.826052][ C1] sd 0:0:1:0: tag#3304 CDB[20]: ba 23:04:22 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x2100, 0x0, 0x1309}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:22 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:22 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:22 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x101200) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1695.959106][ C0] sd 0:0:1:0: tag#3305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1695.968986][ C0] sd 0:0:1:0: tag#3305 CDB: opcode=0xe5 (vendor) [ 1695.975316][ C0] sd 0:0:1:0: tag#3305 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1695.984367][ C0] sd 0:0:1:0: tag#3305 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1695.993429][ C0] sd 0:0:1:0: tag#3305 CDB[20]: ba [ 1696.043231][ C1] sd 0:0:1:0: tag#3306 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1696.053087][ C1] sd 0:0:1:0: tag#3306 CDB: opcode=0xe5 (vendor) [ 1696.059419][ C1] sd 0:0:1:0: tag#3306 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1696.068481][ C1] sd 0:0:1:0: tag#3306 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1696.077518][ C1] sd 0:0:1:0: tag#3306 CDB[20]: ba [ 1696.131507][ C1] sd 0:0:1:0: tag#3307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1696.141373][ C1] sd 0:0:1:0: tag#3307 CDB: opcode=0xe5 (vendor) [ 1696.147729][ C1] sd 0:0:1:0: tag#3307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1696.156852][ C1] sd 0:0:1:0: tag#3307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1696.165888][ C1] sd 0:0:1:0: tag#3307 CDB[20]: ba 23:04:24 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:24 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:24 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000003f00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:24 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:24 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x4000001) syz_io_uring_submit(0x0, r2, 0x0, 0x7) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf257400000008000300", @ANYRES32=0x0, @ANYBLOB="35ea8b4ee0696f420e8676ec5f97ec38a8f23e9f55a81d715b01f2a69d37c2bbdc99f3f6e1c6fd7686a6e55c2b07ba853f9f4876eb0e4fc1cee269f5dc7db73ac9cd0ed97173088ada499fc8c0cd6526f6"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x4000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0xb192, 0x0, 0x0, 0x0) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1698.868497][ C1] sd 0:0:1:0: tag#3321 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1698.878372][ C1] sd 0:0:1:0: tag#3321 CDB: opcode=0xe5 (vendor) [ 1698.884726][ C1] sd 0:0:1:0: tag#3321 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1698.893746][ C1] sd 0:0:1:0: tag#3321 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1698.902859][ C1] sd 0:0:1:0: tag#3321 CDB[20]: ba [ 1698.908476][T13973] loop5: detected capacity change from 0 to 264192 23:04:25 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @scatter={0x9, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/82, 0x52}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000bc0)=""/70, 0x46}, {&(0x7f0000000780)=""/147, 0x93}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/122, 0x7a}, {&(0x7f0000000a00)=""/211, 0xd3}]}, 0x0, 0x0, 0x5, 0x0, 0x1000000, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000004000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) [ 1699.015172][ C0] sd 0:0:1:0: tag#3322 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1699.025035][ C0] sd 0:0:1:0: tag#3322 CDB: opcode=0xe5 (vendor) [ 1699.031386][ C0] sd 0:0:1:0: tag#3322 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1699.040431][ C0] sd 0:0:1:0: tag#3322 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1699.049478][ C0] sd 0:0:1:0: tag#3322 CDB[20]: ba 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1699.087983][ C1] sd 0:0:1:0: tag#3323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1699.097971][ C1] sd 0:0:1:0: tag#3323 CDB: opcode=0xe5 (vendor) [ 1699.104319][ C1] sd 0:0:1:0: tag#3323 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1699.113361][ C1] sd 0:0:1:0: tag#3323 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1699.122398][ C1] sd 0:0:1:0: tag#3323 CDB[20]: ba 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1699.183674][ C1] sd 0:0:1:0: tag#3324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1699.193520][ C1] sd 0:0:1:0: tag#3324 CDB: opcode=0xe5 (vendor) [ 1699.199860][ C1] sd 0:0:1:0: tag#3324 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1699.209113][ C1] sd 0:0:1:0: tag#3324 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1699.218159][ C1] sd 0:0:1:0: tag#3324 CDB[20]: ba 23:04:25 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f00000004c0)=@phonet, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)=""/14}, {&(0x7f0000000540)=""/87}, {&(0x7f00000005c0)=""/128}, {&(0x7f0000000640)=""/223}, {&(0x7f0000000740)=""/215}]}, 0x6}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1699.253227][T14520] loop5: detected capacity change from 0 to 264192 [ 1699.279950][ C0] sd 0:0:1:0: tag#3325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1699.289796][ C0] sd 0:0:1:0: tag#3325 CDB: opcode=0xe5 (vendor) 23:04:25 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1699.296129][ C0] sd 0:0:1:0: tag#3325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1699.305169][ C0] sd 0:0:1:0: tag#3325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1699.314189][ C0] sd 0:0:1:0: tag#3325 CDB[20]: ba 23:04:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000018600000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(r0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r4, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r2, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1699.422177][T14842] loop5: detected capacity change from 0 to 264192 23:04:25 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf00000000000000000001e400000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:25 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 1699.559826][T14989] loop5: detected capacity change from 0 to 264192 23:04:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:04:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)='./file0\x00', 0x8, 0x20000, 0x23456}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000c0ed00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:28 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1702.408930][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 1702.408973][ C0] sd 0:0:1:0: tag#3272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1702.425401][ C0] sd 0:0:1:0: tag#3272 CDB: opcode=0xe5 (vendor) [ 1702.431766][ C0] sd 0:0:1:0: tag#3272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1702.440806][ C0] sd 0:0:1:0: tag#3272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1702.449830][ C0] sd 0:0:1:0: tag#3272 CDB[20]: ba 23:04:28 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001980)="66530700ae897094e7b126b097eaa769be5a28c41bd34e677d1100655e635491468f72e44a260f82e8a95ef0763c60cb88bfc92b0b72d24dbee145f8674c1055759a3723764704b5e4df73ecd93987b178b1ead5a678216d5d3568da7a4d5cc06f3eb331fea00d9a7689f4b93863daa584f2bffe785a64853349fd086c22e3fc56d2b0cae5170871c145045174ad6edb6b0a183dd660ef94af2321945b0d79bb5afadeaad6eadf22e2c738fa8e5b3d0ce62293bee971caee7f09f29dde05963019f00326c2444db9e80044e69e12b938c3124201c20dca1a3f305b25c5a1bd32692cc644c40f062b98390bd873fab30800fa51eaec", 0xf5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1702.455607][T15176] loop5: detected capacity change from 0 to 264192 23:04:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x7, &(0x7f0000000100)=""/7}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x7925, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x80000001, 0x0, 0xffffffff, 0x2}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x2400) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt(r4, 0x2, 0x8, &(0x7f00000006c0)="a6a687d6ba", 0x5) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x0, 0x0, 0x3, 0x0, 0x9, 0xf82e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x5}, 0x22, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r2, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 5: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20000010000, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000fffe00000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000000140)="024344303031", 0x6, 0x8800}, {&(0x7f00000001c0)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef00455205", 0x2c, 0xe000}], 0x0, &(0x7f0000000000)) 23:04:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:28 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffe, 0x0, 0x1f, @buffer={0x0, 0x6, &(0x7f0000000100)=""/6}, 0x0, 0x0, 0x5, 0x30, 0x0, 0x0}) r1 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f00000007c0), 0x0, 0x10}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={0x0}}, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 1702.570849][ C0] sd 0:0:1:0: tag#3273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1702.580711][ C0] sd 0:0:1:0: tag#3273 CDB: opcode=0xe5 (vendor) [ 1702.587069][ C0] sd 0:0:1:0: tag#3273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1702.596114][ C0] sd 0:0:1:0: tag#3273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1702.605156][ C0] sd 0:0:1:0: tag#3273 CDB[20]: ba 23:04:28 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 4: syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r1, 0x0, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:04:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="240000001a005f0214f9f40700000000000000000008000f41309c3b001d150000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 23:04:28 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000000)={0x0, 0x4220}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x100, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/165, 0xa5}], 0x4, 0x10}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000002000)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001f80)=""/2, 0x2}], 0x5}}], 0x1, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0)