00000660000000f000053010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 995.972087][T29959] loop2: detected capacity change from 0 to 512 [ 995.972554][T29960] loop3: detected capacity change from 0 to 512 [ 995.986859][T29959] EXT4-fs (loop2): bad geometry: first data block 268435456 is beyond end of filesystem (128) [ 995.999774][T29960] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.012445][T29953] device veth3988 entered promiscuous mode [ 996.034197][T29960] EXT4-fs (loop3): mount failed [ 996.043252][T29959] loop2: detected capacity change from 0 to 512 [ 996.061790][T29959] EXT4-fs (loop2): bad geometry: first data block 268435456 is beyond end of filesystem (128) 17:30:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1ba}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 996.102356][T29960] loop3: detected capacity change from 0 to 512 [ 996.126863][T29960] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.134264][T29960] EXT4-fs (loop3): mount failed 17:30:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000110100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 996.196822][T29967] loop2: detected capacity change from 0 to 512 [ 996.224872][T29967] EXT4-fs (loop2): bad geometry: first data block 285212672 is beyond end of filesystem (128) 17:30:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000054010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00004f010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x4]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x48000000}, 0x0) [ 996.299905][T29967] loop2: detected capacity change from 0 to 512 [ 996.306549][T29973] loop5: detected capacity change from 0 to 512 [ 996.320086][T29975] loop3: detected capacity change from 0 to 512 [ 996.331497][T29967] EXT4-fs (loop2): bad geometry: first data block 285212672 is beyond end of filesystem (128) [ 996.333353][ C1] sd 0:0:1:0: tag#7244 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 996.351636][ C1] sd 0:0:1:0: tag#7244 CDB: opcode=0xe5 (vendor) [ 996.358004][ C1] sd 0:0:1:0: tag#7244 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 996.367047][ C1] sd 0:0:1:0: tag#7244 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 996.376106][ C1] sd 0:0:1:0: tag#7244 CDB[20]: ba [ 996.385255][T29973] EXT4-fs (loop5): failed to initialize system zone (-117) [ 996.393054][T29973] EXT4-fs (loop5): mount failed 17:30:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000120100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 996.398043][T29975] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.405262][T29969] device veth3991 entered promiscuous mode [ 996.407159][T29975] EXT4-fs (loop3): mount failed [ 996.478958][T29975] loop3: detected capacity change from 0 to 512 [ 996.485412][T29984] loop2: detected capacity change from 0 to 512 [ 996.497441][T29975] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.513442][T29984] EXT4-fs (loop2): bad geometry: first data block 301989888 is beyond end of filesystem (128) 17:30:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xcce}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 996.546415][T29975] EXT4-fs (loop3): mount failed 17:30:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00005e010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 996.600147][T29984] loop2: detected capacity change from 0 to 512 [ 996.616871][T29984] EXT4-fs (loop2): bad geometry: first data block 301989888 is beyond end of filesystem (128) 17:30:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1ee}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000220100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 996.717969][T29992] loop3: detected capacity change from 0 to 512 [ 996.743697][T29992] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.761581][T29992] EXT4-fs (loop3): mount failed [ 996.766822][T29997] loop2: detected capacity change from 0 to 512 17:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4a000000}, 0x0) [ 996.821284][T29997] EXT4-fs (loop2): bad geometry: first data block 570425344 is beyond end of filesystem (128) [ 996.839301][T29992] loop3: detected capacity change from 0 to 512 [ 996.868779][T29997] loop2: detected capacity change from 0 to 512 [ 996.875438][T29992] EXT4-fs (loop3): failed to initialize system zone (-117) [ 996.883046][T29992] EXT4-fs (loop3): mount failed [ 996.892139][T29997] EXT4-fs (loop2): bad geometry: first data block 570425344 is beyond end of filesystem (128) 17:30:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00005f010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000250100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xcce}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 996.965290][T30005] loop3: detected capacity change from 0 to 512 [ 996.979774][T30008] loop2: detected capacity change from 0 to 512 [ 996.986772][T29998] device veth3994 entered promiscuous mode [ 996.992812][T30000] __nla_validate_parse: 32 callbacks suppressed [ 996.992824][T30000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 997.009294][T30005] EXT4-fs (loop3): failed to initialize system zone (-117) [ 997.022930][T30008] EXT4-fs (loop2): bad geometry: first data block 620756992 is beyond end of filesystem (128) [ 997.033791][T30005] EXT4-fs (loop3): mount failed [ 997.095382][T30008] loop2: detected capacity change from 0 to 512 [ 997.102749][T30005] loop3: detected capacity change from 0 to 512 [ 997.109537][T30008] EXT4-fs (loop2): bad geometry: first data block 620756992 is beyond end of filesystem (128) 17:30:31 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x4]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000002e0100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 997.147557][T30005] EXT4-fs (loop3): failed to initialize system zone (-117) [ 997.149719][T29994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.168247][T30005] EXT4-fs (loop3): mount failed 17:30:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000088010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 997.236552][ C1] sd 0:0:1:0: tag#7249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 997.246410][ C1] sd 0:0:1:0: tag#7249 CDB: opcode=0xe5 (vendor) [ 997.252755][ C1] sd 0:0:1:0: tag#7249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 997.259845][T30022] loop3: detected capacity change from 0 to 512 [ 997.261798][ C1] sd 0:0:1:0: tag#7249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 997.277038][ C1] sd 0:0:1:0: tag#7249 CDB[20]: ba 17:30:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1f4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 997.283424][T30020] loop2: detected capacity change from 0 to 512 [ 997.284094][T30011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 997.306249][T30022] EXT4-fs (loop3): failed to initialize system zone (-117) [ 997.313546][T30020] EXT4-fs (loop2): bad geometry: first data block 771751936 is beyond end of filesystem (128) [ 997.331629][T30022] EXT4-fs (loop3): mount failed [ 997.369623][T30020] loop2: detected capacity change from 0 to 512 [ 997.376923][T30022] loop3: detected capacity change from 0 to 512 [ 997.378724][T30000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 997.388159][T30020] EXT4-fs (loop2): bad geometry: first data block 771751936 is beyond end of filesystem (128) [ 997.408222][T30022] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4c000000}, 0x0) [ 997.419003][T30025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.430856][T30022] EXT4-fs (loop3): mount failed 17:30:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000089010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000480100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x0, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 997.533487][T30032] loop3: detected capacity change from 0 to 512 [ 997.551147][T30027] device veth3997 entered promiscuous mode [ 997.552838][T30035] loop2: detected capacity change from 0 to 512 [ 997.557365][T30029] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 997.577231][T30035] EXT4-fs (loop2): bad geometry: first data block 1207959552 is beyond end of filesystem (128) [ 997.578748][T30032] EXT4-fs (loop3): failed to initialize system zone (-117) [ 997.594252][ C0] sd 0:0:1:0: tag#7250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 997.604642][ C0] sd 0:0:1:0: tag#7250 CDB: opcode=0xe5 (vendor) [ 997.610993][ C0] sd 0:0:1:0: tag#7250 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 997.613397][T30032] EXT4-fs (loop3): mount failed [ 997.620046][ C0] sd 0:0:1:0: tag#7250 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 997.633915][ C0] sd 0:0:1:0: tag#7250 CDB[20]: ba [ 997.729816][T30035] loop2: detected capacity change from 0 to 512 [ 997.737910][T30035] EXT4-fs (loop2): bad geometry: first data block 1207959552 is beyond end of filesystem (128) [ 997.756763][T30025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 997.760469][T30032] loop3: detected capacity change from 0 to 512 [ 997.785311][T30032] EXT4-fs (loop3): failed to initialize system zone (-117) [ 997.812313][T30032] EXT4-fs (loop3): mount failed 17:30:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000004c0100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 997.846036][T30030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x206}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00008c010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 997.929138][T30044] loop2: detected capacity change from 0 to 512 [ 997.945498][T30044] EXT4-fs (loop2): bad geometry: first data block 1275068416 is beyond end of filesystem (128) [ 997.967040][T30048] loop3: detected capacity change from 0 to 512 [ 997.997270][T30048] EXT4-fs (loop3): failed to initialize system zone (-117) [ 998.005952][T30048] EXT4-fs (loop3): mount failed [ 998.015692][T30046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 998.027273][T30044] loop2: detected capacity change from 0 to 512 [ 998.034240][T30044] EXT4-fs (loop2): bad geometry: first data block 1275068416 is beyond end of filesystem (128) [ 998.049102][T30048] loop3: detected capacity change from 0 to 512 [ 998.076778][T30048] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4f010000}, 0x0) 17:30:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x4]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 998.141568][T30048] EXT4-fs (loop3): mount failed 17:30:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000600100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 998.162994][ C0] sd 0:0:1:0: tag#7251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.172848][ C0] sd 0:0:1:0: tag#7251 CDB: opcode=0xe5 (vendor) [ 998.179226][ C0] sd 0:0:1:0: tag#7251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 998.188254][ C0] sd 0:0:1:0: tag#7251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 998.197546][ C0] sd 0:0:1:0: tag#7251 CDB[20]: ba 17:30:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00008d010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 998.303378][T30059] loop2: detected capacity change from 0 to 512 [ 998.313086][T30055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 998.327014][T30059] EXT4-fs (loop2): bad geometry: first data block 1610612736 is beyond end of filesystem (128) 17:30:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x214}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 998.365235][T30063] loop3: detected capacity change from 0 to 512 [ 998.389748][T30063] EXT4-fs (loop3): failed to initialize system zone (-117) [ 998.400678][T30059] loop2: detected capacity change from 0 to 512 17:30:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000800000000600000066000000cd070000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 998.419206][T30063] EXT4-fs (loop3): mount failed [ 998.436797][T30059] EXT4-fs (loop2): bad geometry: first data block 1610612736 is beyond end of filesystem (128) 17:30:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000680100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 998.514506][T30069] loop5: detected capacity change from 0 to 512 [ 998.538909][T30063] loop3: detected capacity change from 0 to 512 [ 998.591694][T30069] EXT4-fs error (device loop5): ext4_fill_super:4822: inode #2: comm syz-executor.5: iget: root inode unallocated [ 998.592347][T30073] loop2: detected capacity change from 0 to 512 [ 998.606459][T30063] EXT4-fs (loop3): failed to initialize system zone (-117) [ 998.619657][T30073] EXT4-fs (loop2): bad geometry: first data block 1744830464 is beyond end of filesystem (128) [ 998.657299][T30063] EXT4-fs (loop3): mount failed [ 998.690477][T30069] EXT4-fs (loop5): get root inode failed [ 998.696204][T30069] EXT4-fs (loop5): mount failed [ 998.703575][T30073] loop2: detected capacity change from 0 to 512 [ 998.720447][T30073] EXT4-fs (loop2): bad geometry: first data block 1744830464 is beyond end of filesystem (128) 17:30:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000090010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000006c0100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x0, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 998.829322][T30075] loop3: detected capacity change from 0 to 512 [ 998.842056][T30078] loop2: detected capacity change from 0 to 512 [ 998.851488][T30075] EXT4-fs (loop3): failed to initialize system zone (-117) [ 998.862606][T30078] EXT4-fs (loop2): bad geometry: first data block 1811939328 is beyond end of filesystem (128) [ 998.874871][ C1] sd 0:0:1:0: tag#7252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 998.884724][ C1] sd 0:0:1:0: tag#7252 CDB: opcode=0xe5 (vendor) [ 998.891079][ C1] sd 0:0:1:0: tag#7252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 998.900127][ C1] sd 0:0:1:0: tag#7252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 998.909167][ C1] sd 0:0:1:0: tag#7252 CDB[20]: ba 17:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x60000000}, 0x0) [ 998.932961][T30075] EXT4-fs (loop3): mount failed [ 998.968903][T30075] loop3: detected capacity change from 0 to 512 [ 998.975973][T30078] loop2: detected capacity change from 0 to 512 [ 998.987363][T30078] EXT4-fs (loop2): bad geometry: first data block 1811939328 is beyond end of filesystem (128) [ 999.007015][T30075] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x216}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 999.021072][T30075] EXT4-fs (loop3): mount failed [ 999.061858][ C1] sd 0:0:1:0: tag#7253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 999.071725][ C1] sd 0:0:1:0: tag#7253 CDB: opcode=0xe5 (vendor) [ 999.078075][ C1] sd 0:0:1:0: tag#7253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 999.087111][ C1] sd 0:0:1:0: tag#7253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 999.096147][ C1] sd 0:0:1:0: tag#7253 CDB[20]: ba 17:30:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000091010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000720100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 999.216678][T30093] loop2: detected capacity change from 0 to 512 [ 999.223926][T30093] EXT4-fs (loop2): bad geometry: first data block 1912602624 is beyond end of filesystem (128) [ 999.234736][T30095] loop3: detected capacity change from 0 to 512 [ 999.252543][T30095] EXT4-fs (loop3): failed to initialize system zone (-117) [ 999.261997][T30095] EXT4-fs (loop3): mount failed [ 999.283733][T30093] loop2: detected capacity change from 0 to 512 [ 999.290462][T30093] EXT4-fs (loop2): bad geometry: first data block 1912602624 is beyond end of filesystem (128) [ 999.308685][T30095] loop3: detected capacity change from 0 to 512 17:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000730100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 999.342940][T30095] EXT4-fs (loop3): failed to initialize system zone (-117) [ 999.372704][T30095] EXT4-fs (loop3): mount failed 17:30:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000fc010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x21e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 999.394532][T30101] loop2: detected capacity change from 0 to 512 [ 999.409728][T30101] EXT4-fs (loop2): bad geometry: first data block 1929379840 is beyond end of filesystem (128) [ 999.461727][T30103] loop3: detected capacity change from 0 to 512 17:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x65580000}, 0x0) [ 999.507342][T30101] loop2: detected capacity change from 0 to 512 [ 999.516972][T30101] EXT4-fs (loop2): bad geometry: first data block 1929379840 is beyond end of filesystem (128) [ 999.529297][T30103] EXT4-fs (loop3): failed to initialize system zone (-117) [ 999.546414][T30103] EXT4-fs (loop3): mount failed [ 999.602534][T30103] loop3: detected capacity change from 0 to 512 [ 999.640349][T30103] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000740100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000fd010000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x4]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 999.649857][T30103] EXT4-fs (loop3): mount failed [ 999.662161][T30114] loop2: detected capacity change from 0 to 512 [ 999.682169][T30114] EXT4-fs (loop2): bad geometry: first data block 1946157056 is beyond end of filesystem (128) [ 999.733705][T30118] loop3: detected capacity change from 0 to 512 [ 999.746038][T30114] loop2: detected capacity change from 0 to 512 [ 999.753739][T30118] EXT4-fs (loop3): failed to initialize system zone (-117) [ 999.754528][T30114] EXT4-fs (loop2): bad geometry: first data block 1946157056 is beyond end of filesystem (128) [ 999.771550][T30118] EXT4-fs (loop3): mount failed [ 999.790249][ C1] sd 0:0:1:0: tag#7254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 999.800102][ C1] sd 0:0:1:0: tag#7254 CDB: opcode=0xe5 (vendor) [ 999.806443][ C1] sd 0:0:1:0: tag#7254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 999.815465][ C1] sd 0:0:1:0: tag#7254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 999.824506][ C1] sd 0:0:1:0: tag#7254 CDB[20]: ba 17:30:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x232}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 999.867322][T30118] loop3: detected capacity change from 0 to 512 [ 999.892729][T30118] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:33 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:33 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000750100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x68000000}, 0x0) [ 999.915857][T30118] EXT4-fs (loop3): mount failed [ 999.933761][T30126] loop2: detected capacity change from 0 to 512 [ 999.958725][T30126] EXT4-fs (loop2): bad geometry: first data block 1962934272 is beyond end of filesystem (128) [ 999.971029][ C1] sd 0:0:1:0: tag#7255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 999.980900][ C1] sd 0:0:1:0: tag#7255 CDB: opcode=0xe5 (vendor) [ 999.987256][ C1] sd 0:0:1:0: tag#7255 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 999.996296][ C1] sd 0:0:1:0: tag#7255 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:30:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1000.005413][ C1] sd 0:0:1:0: tag#7255 CDB[20]: ba [ 1000.039904][T30126] loop2: detected capacity change from 0 to 512 [ 1000.040471][T30134] loop3: detected capacity change from 0 to 512 [ 1000.054587][T30126] EXT4-fs (loop2): bad geometry: first data block 1962934272 is beyond end of filesystem (128) [ 1000.093992][T30134] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.101561][T30134] EXT4-fs (loop3): mount failed 17:30:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000007a0100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1000.147756][T30134] loop3: detected capacity change from 0 to 512 [ 1000.186817][T30134] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.196212][T30140] loop2: detected capacity change from 0 to 512 [ 1000.209910][T30134] EXT4-fs (loop3): mount failed [ 1000.216356][T30140] EXT4-fs (loop2): bad geometry: first data block 2046820352 is beyond end of filesystem (128) 17:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x23c}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x6c000000}, 0x0) [ 1000.278479][T30140] loop2: detected capacity change from 0 to 512 [ 1000.295287][T30140] EXT4-fs (loop2): bad geometry: first data block 2046820352 is beyond end of filesystem (128) 17:30:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000004020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000fe0100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1000.376247][T30148] loop3: detected capacity change from 0 to 512 [ 1000.411717][T30151] loop2: detected capacity change from 0 to 512 [ 1000.428258][T30151] EXT4-fs (loop2): bad geometry: first data block 4261412864 is beyond end of filesystem (128) [ 1000.440706][T30148] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.448546][T30148] EXT4-fs (loop3): mount failed [ 1000.496964][T30148] loop3: detected capacity change from 0 to 512 [ 1000.497099][T30151] loop2: detected capacity change from 0 to 512 [ 1000.534090][T30148] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.543539][T30151] EXT4-fs (loop2): bad geometry: first data block 4261412864 is beyond end of filesystem (128) [ 1000.556193][T30148] EXT4-fs (loop3): mount failed 17:30:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00002c020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000300000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1000.630433][ C1] sd 0:0:1:0: tag#7256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1000.640300][ C1] sd 0:0:1:0: tag#7256 CDB: opcode=0xe5 (vendor) [ 1000.646666][ C1] sd 0:0:1:0: tag#7256 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1000.646686][T30159] loop3: detected capacity change from 0 to 512 [ 1000.655687][ C1] sd 0:0:1:0: tag#7256 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1000.670948][ C1] sd 0:0:1:0: tag#7256 CDB[20]: ba [ 1000.702259][T30163] loop2: detected capacity change from 0 to 512 [ 1000.711981][T30159] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.729131][T30159] EXT4-fs (loop3): mount failed [ 1000.743458][T30163] EXT4-fs (loop2): bad block size 8192 17:30:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x240}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x74000000}, 0x0) [ 1000.778110][T30159] loop3: detected capacity change from 0 to 512 [ 1000.814340][T30163] loop2: detected capacity change from 0 to 512 [ 1000.821130][T30159] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1000.832880][ C1] sd 0:0:1:0: tag#7257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1000.842746][ C1] sd 0:0:1:0: tag#7257 CDB: opcode=0xe5 (vendor) [ 1000.849098][ C1] sd 0:0:1:0: tag#7257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1000.858131][ C1] sd 0:0:1:0: tag#7257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1000.858263][T30159] EXT4-fs (loop3): mount failed [ 1000.867168][ C1] sd 0:0:1:0: tag#7257 CDB[20]: ba 17:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x244}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1000.924178][T30163] EXT4-fs (loop2): bad block size 8192 17:30:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000500000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00002e020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x7a000000}, 0x0) [ 1001.014200][T30179] loop3: detected capacity change from 0 to 512 [ 1001.028641][T30179] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.039193][T30179] EXT4-fs (loop3): mount failed [ 1001.083139][T30185] loop2: detected capacity change from 0 to 512 [ 1001.093525][T30185] EXT4-fs (loop2): bad block size 32768 [ 1001.101404][T30179] loop3: detected capacity change from 0 to 512 [ 1001.135556][T30179] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.171737][T30185] loop2: detected capacity change from 0 to 512 [ 1001.178076][T30179] EXT4-fs (loop3): mount failed [ 1001.183273][T30185] EXT4-fs (loop2): bad block size 32768 17:30:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000030020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000600000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1001.289342][T30192] loop3: detected capacity change from 0 to 512 [ 1001.315064][T30194] loop2: detected capacity change from 0 to 512 [ 1001.319103][T30192] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.329770][T30194] EXT4-fs (loop2): bad block size 65536 [ 1001.345800][T30192] EXT4-fs (loop3): mount failed [ 1001.376910][T30192] loop3: detected capacity change from 0 to 512 [ 1001.387757][T30194] loop2: detected capacity change from 0 to 512 [ 1001.388523][T30192] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.405902][T30192] EXT4-fs (loop3): mount failed [ 1001.411073][T30194] EXT4-fs (loop2): bad block size 65536 17:30:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x0, 0x0}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x24a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x7c020000}, 0x0) [ 1001.531917][ C1] sd 0:0:1:0: tag#7258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1001.541773][ C1] sd 0:0:1:0: tag#7258 CDB: opcode=0xe5 (vendor) [ 1001.548118][ C1] sd 0:0:1:0: tag#7258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1001.557138][ C1] sd 0:0:1:0: tag#7258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1001.566180][ C1] sd 0:0:1:0: tag#7258 CDB[20]: ba 17:30:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00006e020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000700000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:35 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1001.670205][T30206] loop3: detected capacity change from 0 to 512 [ 1001.684845][T30208] loop2: detected capacity change from 0 to 512 [ 1001.701063][T30208] EXT4-fs (loop2): Invalid log block size: 7 [ 1001.708867][T30206] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.719233][ C0] sd 0:0:1:0: tag#7263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1001.729071][ C0] sd 0:0:1:0: tag#7263 CDB: opcode=0xe5 (vendor) [ 1001.735397][ C0] sd 0:0:1:0: tag#7263 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1001.744432][ C0] sd 0:0:1:0: tag#7263 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1001.753485][ C0] sd 0:0:1:0: tag#7263 CDB[20]: ba [ 1001.764645][T30206] EXT4-fs (loop3): mount failed 17:30:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x25c}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x81000000}, 0x0) [ 1001.812474][T30208] loop2: detected capacity change from 0 to 512 [ 1001.821662][T30206] loop3: detected capacity change from 0 to 512 [ 1001.830434][T30208] EXT4-fs (loop2): Invalid log block size: 7 17:30:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000180800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1001.857517][T30206] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1001.870248][T30206] EXT4-fs (loop3): mount failed [ 1001.908791][T30223] loop2: detected capacity change from 0 to 512 [ 1001.916474][T30223] EXT4-fs (loop2): Invalid log block size: 8 17:30:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00006f020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1001.976735][T30223] loop2: detected capacity change from 0 to 512 [ 1001.984215][T30223] EXT4-fs (loop2): Invalid log block size: 8 [ 1001.988706][T30226] loop3: detected capacity change from 0 to 512 [ 1002.004912][T30226] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.012322][T30226] EXT4-fs (loop3): mount failed 17:30:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.083200][T30226] loop3: detected capacity change from 0 to 512 [ 1002.097203][T30231] loop2: detected capacity change from 0 to 512 [ 1002.105911][T30217] __nla_validate_parse: 33 callbacks suppressed [ 1002.105922][T30217] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.107715][T30231] EXT4-fs (loop2): Invalid log block size: 9 [ 1002.132400][T30226] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.139870][T30226] EXT4-fs (loop3): mount failed 17:30:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000072020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.180399][T30231] loop2: detected capacity change from 0 to 512 [ 1002.193181][T30228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.197824][T30235] loop3: detected capacity change from 0 to 512 [ 1002.222222][T30231] EXT4-fs (loop2): Invalid log block size: 9 [ 1002.246287][T30235] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.256909][T30235] EXT4-fs (loop3): mount failed [ 1002.297318][T30235] loop3: detected capacity change from 0 to 512 [ 1002.305029][T30235] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.313922][T30235] EXT4-fs (loop3): mount failed 17:30:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x0, 0x0}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x260}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x81ffffff}, 0x0) 17:30:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000a00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.387496][T30240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.399920][ C0] sd 0:0:1:0: tag#7264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1002.409493][T30245] loop2: detected capacity change from 0 to 512 [ 1002.409788][ C0] sd 0:0:1:0: tag#7264 CDB: opcode=0xe5 (vendor) [ 1002.422295][ C0] sd 0:0:1:0: tag#7264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1002.422614][T30245] EXT4-fs (loop2): Invalid log block size: 10 17:30:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000073020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.431367][ C0] sd 0:0:1:0: tag#7264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1002.446467][ C0] sd 0:0:1:0: tag#7264 CDB[20]: ba [ 1002.465431][T30249] loop3: detected capacity change from 0 to 512 [ 1002.478780][T30249] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.495904][T30249] EXT4-fs (loop3): mount failed 17:30:36 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1002.521062][T30242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.539603][T30245] loop2: detected capacity change from 0 to 512 [ 1002.547510][T30249] loop3: detected capacity change from 0 to 512 [ 1002.554633][T30245] EXT4-fs (loop2): Invalid log block size: 10 [ 1002.576605][ C1] sd 0:0:1:0: tag#7265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1002.586497][ C1] sd 0:0:1:0: tag#7265 CDB: opcode=0xe5 (vendor) [ 1002.592825][ C1] sd 0:0:1:0: tag#7265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1002.602686][ C1] sd 0:0:1:0: tag#7265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1002.611728][ C1] sd 0:0:1:0: tag#7265 CDB[20]: ba [ 1002.616448][T30249] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000b00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.624543][T30249] EXT4-fs (loop3): mount failed 17:30:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000076020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.665667][T30257] loop2: detected capacity change from 0 to 512 [ 1002.674506][T30257] EXT4-fs (loop2): Invalid log block size: 11 [ 1002.721581][T30260] loop3: detected capacity change from 0 to 512 [ 1002.732118][T30257] loop2: detected capacity change from 0 to 512 [ 1002.739188][T30257] EXT4-fs (loop2): Invalid log block size: 11 [ 1002.745679][T30242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.756579][T30260] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000180b00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1002.786782][T30260] EXT4-fs (loop3): mount failed 17:30:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x262}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1002.825709][T30264] loop2: detected capacity change from 0 to 512 [ 1002.832458][T30240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1002.843861][T30264] EXT4-fs (loop2): Invalid log block size: 11 [ 1002.853188][T30260] loop3: detected capacity change from 0 to 512 [ 1002.891047][T30260] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1002.910182][T30264] loop2: detected capacity change from 0 to 512 [ 1002.918046][T30260] EXT4-fs (loop3): mount failed [ 1002.928080][T30264] EXT4-fs (loop2): Invalid log block size: 11 17:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x86010000}, 0x0) [ 1002.938891][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000077020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.016121][T30269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1003.081092][T30274] loop3: detected capacity change from 0 to 512 [ 1003.113218][T30274] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1003.120692][T30274] EXT4-fs (loop3): mount failed [ 1003.173811][T30271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1003.185093][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000d000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000c00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.220599][T30274] loop3: detected capacity change from 0 to 512 17:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x88470000}, 0x0) 17:30:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x26a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1003.266123][T30274] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1003.270070][T30280] loop2: detected capacity change from 0 to 512 [ 1003.276051][T30274] EXT4-fs (loop3): mount failed [ 1003.300951][T30282] loop5: detected capacity change from 0 to 512 [ 1003.305998][T30280] EXT4-fs (loop2): Invalid log block size: 12 17:30:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000a0020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.325005][T30282] EXT4-fs error (device loop5): ext4_fill_super:4822: inode #2: comm syz-executor.5: iget: root inode unallocated [ 1003.347398][T30280] loop2: detected capacity change from 0 to 512 [ 1003.359046][T30282] EXT4-fs (loop5): get root inode failed [ 1003.362798][T30280] EXT4-fs (loop2): Invalid log block size: 12 [ 1003.364704][T30282] EXT4-fs (loop5): mount failed [ 1003.373366][T30286] loop3: detected capacity change from 0 to 512 [ 1003.402080][T30286] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000180c00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.434554][T30286] EXT4-fs (loop3): mount failed 17:30:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1003.478587][T30286] loop3: detected capacity change from 0 to 512 [ 1003.484419][ C0] sd 0:0:1:0: tag#7266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1003.495139][ C0] sd 0:0:1:0: tag#7266 CDB: opcode=0xe5 (vendor) [ 1003.501482][ C0] sd 0:0:1:0: tag#7266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1003.510517][ C0] sd 0:0:1:0: tag#7266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1003.519554][ C0] sd 0:0:1:0: tag#7266 CDB[20]: ba [ 1003.535364][T30299] loop2: detected capacity change from 0 to 512 [ 1003.546484][ C0] sd 0:0:1:0: tag#7267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1003.556348][ C0] sd 0:0:1:0: tag#7267 CDB: opcode=0xe5 (vendor) [ 1003.562706][ C0] sd 0:0:1:0: tag#7267 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1003.571759][ C0] sd 0:0:1:0: tag#7267 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1003.580837][ C0] sd 0:0:1:0: tag#7267 CDB[20]: ba [ 1003.588108][T30299] EXT4-fs (loop2): Invalid log block size: 12 [ 1003.604488][T30286] EXT4-fs: failed to create workqueue [ 1003.609992][T30286] EXT4-fs (loop3): mount failed [ 1003.616806][T30299] loop2: detected capacity change from 0 to 512 [ 1003.626792][T30299] EXT4-fs (loop2): Invalid log block size: 12 17:30:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000a1020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000d00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x274}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1003.733246][T30305] loop2: detected capacity change from 0 to 512 [ 1003.761905][T30305] EXT4-fs (loop2): Invalid log block size: 13 [ 1003.762293][T30307] loop3: detected capacity change from 0 to 512 17:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x88480000}, 0x0) [ 1003.825174][T30307] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1003.825475][T30305] loop2: detected capacity change from 0 to 512 [ 1003.852620][T30305] EXT4-fs (loop2): Invalid log block size: 13 [ 1003.858923][T30307] EXT4-fs (loop3): mount failed 17:30:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000180d00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.923930][T30307] loop3: detected capacity change from 0 to 512 [ 1003.935547][T30307] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1003.944242][T30307] EXT4-fs (loop3): mount failed [ 1003.952988][T30317] loop2: detected capacity change from 0 to 512 17:30:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ab020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1003.970880][T30317] EXT4-fs (loop2): Invalid log block size: 13 [ 1004.017587][T30320] loop3: detected capacity change from 0 to 512 [ 1004.032008][T30320] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1004.039555][T30317] loop2: detected capacity change from 0 to 512 [ 1004.047298][T30320] EXT4-fs (loop3): mount failed [ 1004.052677][T30317] EXT4-fs (loop2): Invalid log block size: 13 17:30:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x27e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1004.097000][T30320] loop3: detected capacity change from 0 to 512 17:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 1004.137837][T30320] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1004.148274][T30328] loop2: detected capacity change from 0 to 512 [ 1004.153869][T30320] EXT4-fs (loop3): mount failed [ 1004.170594][T30328] EXT4-fs (loop2): Invalid log block size: 14 [ 1004.232597][T30328] loop2: detected capacity change from 0 to 512 [ 1004.264852][T30328] EXT4-fs (loop2): Invalid log block size: 14 17:30:38 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ac020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000180e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1004.333583][T30334] loop3: detected capacity change from 0 to 512 [ 1004.342077][ C0] sd 0:0:1:0: tag#7268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1004.351920][ C0] sd 0:0:1:0: tag#7268 CDB: opcode=0xe5 (vendor) [ 1004.358273][ C0] sd 0:0:1:0: tag#7268 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1004.367663][ C0] sd 0:0:1:0: tag#7268 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1004.376711][ C0] sd 0:0:1:0: tag#7268 CDB[20]: ba [ 1004.408952][T30340] loop2: detected capacity change from 0 to 512 [ 1004.415492][T30334] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1004.432820][ C1] sd 0:0:1:0: tag#7269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1004.433703][T30334] EXT4-fs (loop3): mount failed [ 1004.442674][ C1] sd 0:0:1:0: tag#7269 CDB: opcode=0xe5 (vendor) [ 1004.453839][ C1] sd 0:0:1:0: tag#7269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1004.462873][ C1] sd 0:0:1:0: tag#7269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1004.471913][ C1] sd 0:0:1:0: tag#7269 CDB[20]: ba 17:30:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x282}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1004.542324][T30340] EXT4-fs (loop2): Invalid log block size: 14 [ 1004.581829][T30334] loop3: detected capacity change from 0 to 512 [ 1004.590400][T30340] loop2: detected capacity change from 0 to 512 [ 1004.598496][T30340] EXT4-fs (loop2): Invalid log block size: 14 [ 1004.631466][T30334] EXT4-fs (loop3): failed to initialize system zone (-117) 17:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x986c1b47}, 0x0) [ 1004.653512][T30334] EXT4-fs (loop3): mount failed 17:30:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ad020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1004.717760][T30353] loop2: detected capacity change from 0 to 512 [ 1004.738886][T30353] EXT4-fs (loop2): Invalid log block size: 15 [ 1004.796721][T30353] loop2: detected capacity change from 0 to 512 [ 1004.812145][T30353] EXT4-fs (loop2): Invalid log block size: 15 [ 1004.818692][T30358] loop3: detected capacity change from 0 to 512 17:30:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000001100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1004.850318][T30358] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1004.888185][T30358] EXT4-fs (loop3): mount failed [ 1004.904013][T30362] loop2: detected capacity change from 0 to 512 [ 1004.914763][T30362] EXT4-fs (loop2): Invalid log block size: 17 [ 1004.956363][T30358] loop3: detected capacity change from 0 to 512 [ 1004.971216][T30358] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1004.990815][T30358] EXT4-fs (loop3): mount failed [ 1004.995765][T30362] loop2: detected capacity change from 0 to 512 [ 1005.003038][T30362] EXT4-fs (loop2): Invalid log block size: 17 17:30:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x288}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9c030000}, 0x0) 17:30:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000b6020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1005.102472][T30369] loop3: detected capacity change from 0 to 512 17:30:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000001400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1005.147569][T30369] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1005.155392][T30369] EXT4-fs (loop3): mount failed [ 1005.204038][T30374] loop2: detected capacity change from 0 to 512 [ 1005.217045][T30374] EXT4-fs (loop2): Invalid log block size: 20 17:30:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1005.245815][T30369] loop3: detected capacity change from 0 to 512 [ 1005.258258][T30369] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1005.267887][T30374] loop2: detected capacity change from 0 to 512 [ 1005.278184][T30374] EXT4-fs (loop2): Invalid log block size: 20 [ 1005.280234][T30369] EXT4-fs (loop3): mount failed 17:30:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000002000000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000e6020000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1005.364849][T30382] loop2: detected capacity change from 0 to 512 [ 1005.388559][T30382] EXT4-fs (loop2): Invalid log block size: 32 [ 1005.396839][T30385] loop3: detected capacity change from 0 to 512 17:30:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x28a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9effffff}, 0x0) [ 1005.461929][T30385] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1005.471498][T30385] EXT4-fs (loop3): mount failed [ 1005.498380][T30382] loop2: detected capacity change from 0 to 512 [ 1005.508315][T30385] loop3: detected capacity change from 0 to 512 [ 1005.525801][T30382] EXT4-fs (loop2): Invalid log block size: 32 [ 1005.534752][T30385] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1005.542183][T30385] EXT4-fs (loop3): mount failed 17:30:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000002500000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1005.649673][T30395] loop2: detected capacity change from 0 to 512 [ 1005.657108][T30395] EXT4-fs (loop2): Invalid log block size: 37 [ 1005.665355][T30397] loop3: detected capacity change from 0 to 512 [ 1005.674104][T30397] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1005.684259][T30397] EXT4-fs (loop3): group descriptors corrupted! [ 1005.708030][T30395] loop2: detected capacity change from 0 to 512 [ 1005.715643][T30395] EXT4-fs (loop2): Invalid log block size: 37 [ 1005.727236][T30397] loop3: detected capacity change from 0 to 512 [ 1005.745535][T30397] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 17:30:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x294}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1005.755665][T30397] EXT4-fs (loop3): group descriptors corrupted! 17:30:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000046030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000002e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1005.887873][T30408] loop2: detected capacity change from 0 to 512 [ 1005.895865][T30409] loop3: detected capacity change from 0 to 512 [ 1005.907935][T30408] EXT4-fs (loop2): Invalid log block size: 46 [ 1005.919262][T30409] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1005.929415][T30409] EXT4-fs (loop3): group descriptors corrupted! [ 1005.962931][T30408] loop2: detected capacity change from 0 to 512 [ 1005.993164][T30409] loop3: detected capacity change from 0 to 512 [ 1006.000864][T30408] EXT4-fs (loop2): Invalid log block size: 46 17:30:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9f050000}, 0x0) 17:30:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1006.009862][T30409] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.019944][T30409] EXT4-fs (loop3): group descriptors corrupted! 17:30:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000007f3e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00009c030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x298}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1006.134522][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1006.134553][ C0] sd 0:0:1:0: tag#7272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1006.151003][ C0] sd 0:0:1:0: tag#7272 CDB: opcode=0xe5 (vendor) [ 1006.157346][ C0] sd 0:0:1:0: tag#7272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1006.166401][ C0] sd 0:0:1:0: tag#7272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1006.175423][ C0] sd 0:0:1:0: tag#7272 CDB[20]: ba [ 1006.203846][T30417] loop3: detected capacity change from 0 to 512 [ 1006.213448][T30421] loop2: detected capacity change from 0 to 512 [ 1006.222594][T30417] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.232714][T30417] EXT4-fs (loop3): group descriptors corrupted! [ 1006.236702][ C0] sd 0:0:1:0: tag#7273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1006.248955][ C0] sd 0:0:1:0: tag#7273 CDB: opcode=0xe5 (vendor) [ 1006.255290][ C0] sd 0:0:1:0: tag#7273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1006.264349][ C0] sd 0:0:1:0: tag#7273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1006.273405][ C0] sd 0:0:1:0: tag#7273 CDB[20]: ba [ 1006.289694][T30421] EXT4-fs (loop2): Invalid log block size: 62 [ 1006.339340][T30421] loop2: detected capacity change from 0 to 512 [ 1006.340271][T30417] loop3: detected capacity change from 0 to 512 [ 1006.354964][T30421] EXT4-fs (loop2): Invalid log block size: 62 [ 1006.361241][T30417] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.371386][T30417] EXT4-fs (loop3): group descriptors corrupted! 17:30:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000e4030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000003f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1006.455207][T30430] loop3: detected capacity change from 0 to 512 [ 1006.465501][T30432] loop2: detected capacity change from 0 to 512 [ 1006.483913][T30432] EXT4-fs (loop2): Invalid log block size: 63 [ 1006.494335][T30430] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 17:30:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc3ffffff}, 0x0) [ 1006.504487][T30430] EXT4-fs (loop3): group descriptors corrupted! 17:30:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2a0}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1006.560929][T30430] loop3: detected capacity change from 0 to 512 [ 1006.561583][T30432] loop2: detected capacity change from 0 to 512 [ 1006.577655][T30432] EXT4-fs (loop2): Invalid log block size: 63 [ 1006.584027][T30430] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.594149][T30430] EXT4-fs (loop3): group descriptors corrupted! 17:30:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000004000000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000e6030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1006.658084][T30440] loop2: detected capacity change from 0 to 512 [ 1006.664832][T30442] loop3: detected capacity change from 0 to 512 [ 1006.688511][T30440] EXT4-fs (loop2): Invalid log block size: 64 [ 1006.722146][T30442] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.732311][T30442] EXT4-fs (loop3): group descriptors corrupted! [ 1006.743475][T30440] loop2: detected capacity change from 0 to 512 [ 1006.751937][T30440] EXT4-fs (loop2): Invalid log block size: 64 17:30:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000004400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1006.801157][T30442] loop3: detected capacity change from 0 to 512 [ 1006.816181][T30442] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1006.826329][T30442] EXT4-fs (loop3): group descriptors corrupted! [ 1006.891486][T30447] loop2: detected capacity change from 0 to 512 17:30:40 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1006.937845][T30447] EXT4-fs (loop2): Invalid log block size: 68 [ 1006.986850][T30447] loop2: detected capacity change from 0 to 512 [ 1006.987272][ C1] sd 0:0:1:0: tag#7278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1007.000301][T30447] EXT4-fs (loop2): Invalid log block size: 68 [ 1007.002942][ C1] sd 0:0:1:0: tag#7278 CDB: opcode=0xe5 (vendor) [ 1007.015311][ C1] sd 0:0:1:0: tag#7278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1007.024353][ C1] sd 0:0:1:0: tag#7278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1007.033391][ C1] sd 0:0:1:0: tag#7278 CDB[20]: ba 17:30:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc4050000}, 0x0) 17:30:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000f4030000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2aa}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000006400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.111559][T30455] loop3: detected capacity change from 0 to 512 [ 1007.119945][T30456] __nla_validate_parse: 34 callbacks suppressed [ 1007.119960][T30456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1007.121136][T30458] loop2: detected capacity change from 0 to 512 [ 1007.143183][T30455] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.153324][T30455] EXT4-fs (loop3): group descriptors corrupted! [ 1007.164499][ C0] sd 0:0:1:0: tag#7279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1007.165556][T30458] EXT4-fs (loop2): Invalid log block size: 100 [ 1007.174350][ C0] sd 0:0:1:0: tag#7279 CDB: opcode=0xe5 (vendor) [ 1007.174372][ C0] sd 0:0:1:0: tag#7279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1007.195908][ C0] sd 0:0:1:0: tag#7279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1007.204934][ C0] sd 0:0:1:0: tag#7279 CDB[20]: ba [ 1007.254092][T30452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1007.285257][T30455] loop3: detected capacity change from 0 to 512 [ 1007.296429][T30458] loop2: detected capacity change from 0 to 512 [ 1007.303065][T30455] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.313254][T30455] EXT4-fs (loop3): group descriptors corrupted! [ 1007.313317][T30458] EXT4-fs (loop2): Invalid log block size: 100 17:30:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002040000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.377357][T30466] loop3: detected capacity change from 0 to 512 [ 1007.385015][T30466] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.395189][T30466] EXT4-fs (loop3): group descriptors corrupted! [ 1007.416527][T30463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000007f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.417010][T30466] loop3: detected capacity change from 0 to 512 [ 1007.437442][T30466] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.447556][T30466] EXT4-fs (loop3): group descriptors corrupted! 17:30:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000006040000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.497122][T30469] loop2: detected capacity change from 0 to 512 [ 1007.530067][T30469] EXT4-fs (loop2): Invalid log block size: 127 17:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc5050000}, 0x0) [ 1007.556413][T30452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1007.562443][T30471] loop3: detected capacity change from 0 to 512 [ 1007.577079][T30469] loop2: detected capacity change from 0 to 512 [ 1007.600387][T30469] EXT4-fs (loop2): Invalid log block size: 127 17:30:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2b2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1007.616718][T30471] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.626870][T30471] EXT4-fs (loop3): group descriptors corrupted! [ 1007.655804][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000008100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.679038][T30471] loop3: detected capacity change from 0 to 512 [ 1007.688011][T30471] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1007.698286][T30471] EXT4-fs (loop3): group descriptors corrupted! [ 1007.768955][T30479] loop2: detected capacity change from 0 to 512 [ 1007.775501][T30476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) sendfile(r2, r0, 0x0, 0x3fe00) [ 1007.810364][T30479] EXT4-fs (loop2): Invalid log block size: 129 [ 1007.877557][ C1] sd 0:0:1:0: tag#7280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1007.878350][T30479] loop2: detected capacity change from 0 to 512 [ 1007.887427][ C1] sd 0:0:1:0: tag#7280 CDB: opcode=0xe5 (vendor) [ 1007.900009][ C1] sd 0:0:1:0: tag#7280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1007.909059][ C1] sd 0:0:1:0: tag#7280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1007.918088][ C1] sd 0:0:1:0: tag#7280 CDB[20]: ba [ 1007.926728][T30479] EXT4-fs (loop2): Invalid log block size: 129 17:30:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000010040000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000008900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1007.967569][T30473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1007.977844][T30476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1008.031088][T30487] loop3: detected capacity change from 0 to 512 [ 1008.034648][T30488] loop2: detected capacity change from 0 to 512 [ 1008.047964][T30487] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.049546][T30488] EXT4-fs (loop2): Invalid log block size: 137 [ 1008.058141][T30487] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2d2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xce0c0000}, 0x0) [ 1008.074344][ C0] sd 0:0:1:0: tag#7281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1008.084201][ C0] sd 0:0:1:0: tag#7281 CDB: opcode=0xe5 (vendor) [ 1008.090546][ C0] sd 0:0:1:0: tag#7281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1008.099705][ C0] sd 0:0:1:0: tag#7281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1008.108744][ C0] sd 0:0:1:0: tag#7281 CDB[20]: ba [ 1008.168625][T30487] loop3: detected capacity change from 0 to 512 [ 1008.173345][T30492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1008.175307][T30488] loop2: detected capacity change from 0 to 512 [ 1008.195629][T30488] EXT4-fs (loop2): Invalid log block size: 137 [ 1008.208711][T30487] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.218883][T30487] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000d800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1008.265214][T30494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1008.305026][T30499] loop2: detected capacity change from 0 to 512 17:30:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000050000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1008.323282][T30499] EXT4-fs (loop2): Invalid log block size: 216 [ 1008.355327][T30501] loop3: detected capacity change from 0 to 512 [ 1008.362961][T30501] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.373085][T30501] EXT4-fs (loop3): group descriptors corrupted! [ 1008.392021][T30499] loop2: detected capacity change from 0 to 512 [ 1008.407355][T30499] EXT4-fs (loop2): Invalid log block size: 216 17:30:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2d4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1008.417914][T30501] loop3: detected capacity change from 0 to 512 [ 1008.443587][T30501] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.453737][T30501] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000d900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000060000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1008.519251][T30504] loop2: detected capacity change from 0 to 512 [ 1008.532228][T30504] EXT4-fs (loop2): Invalid log block size: 217 [ 1008.538881][T30508] loop3: detected capacity change from 0 to 512 [ 1008.547925][T30508] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.558041][T30508] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xd0010000}, 0x0) [ 1008.597014][T30508] loop3: detected capacity change from 0 to 512 [ 1008.604236][T30504] loop2: detected capacity change from 0 to 512 [ 1008.611353][T30504] EXT4-fs (loop2): Invalid log block size: 217 [ 1008.620592][T30508] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.630719][T30508] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000da00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1008.734696][T30516] loop2: detected capacity change from 0 to 512 [ 1008.743017][T30516] EXT4-fs (loop2): Invalid log block size: 218 [ 1008.750625][ C0] sd 0:0:1:0: tag#7282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1008.760484][ C0] sd 0:0:1:0: tag#7282 CDB: opcode=0xe5 (vendor) [ 1008.766842][ C0] sd 0:0:1:0: tag#7282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1008.776017][ C0] sd 0:0:1:0: tag#7282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1008.785058][ C0] sd 0:0:1:0: tag#7282 CDB[20]: ba [ 1008.827505][T30516] loop2: detected capacity change from 0 to 512 [ 1008.834157][T30516] EXT4-fs (loop2): Invalid log block size: 218 17:30:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3ce, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000004060000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2d6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000db00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1008.914048][T30523] loop3: detected capacity change from 0 to 512 [ 1008.931454][T30525] loop2: detected capacity change from 0 to 512 [ 1008.940163][T30523] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1008.950347][T30523] EXT4-fs (loop3): group descriptors corrupted! 17:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xe2000000}, 0x0) [ 1008.964578][T30525] EXT4-fs (loop2): Invalid log block size: 219 [ 1008.998546][T30523] loop3: detected capacity change from 0 to 512 [ 1009.008518][T30523] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1009.008555][T30525] loop2: detected capacity change from 0 to 512 [ 1009.018661][T30523] EXT4-fs (loop3): group descriptors corrupted! [ 1009.036003][T30525] EXT4-fs (loop2): Invalid log block size: 219 17:30:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000dc00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000070000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1009.133404][T30537] loop2: detected capacity change from 0 to 512 [ 1009.153162][T30538] loop3: detected capacity change from 0 to 512 [ 1009.160397][T30537] EXT4-fs (loop2): Invalid log block size: 220 [ 1009.180710][T30538] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1009.190820][T30538] EXT4-fs (loop3): group descriptors corrupted! 17:30:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x3ce, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1009.225614][T30537] loop2: detected capacity change from 0 to 512 [ 1009.238869][T30537] EXT4-fs (loop2): Invalid log block size: 220 17:30:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000011f900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1009.300621][T30538] loop3: detected capacity change from 0 to 512 [ 1009.337061][T30544] loop2: detected capacity change from 0 to 512 17:30:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2d8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1009.344492][T30538] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1009.345440][T30544] EXT4-fs (loop2): Invalid log block size: 249 [ 1009.354631][T30538] EXT4-fs (loop3): group descriptors corrupted! [ 1009.430914][T30544] loop2: detected capacity change from 0 to 512 [ 1009.471054][T30544] EXT4-fs (loop2): Invalid log block size: 249 17:30:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000090000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xeaffffff}, 0x0) 17:30:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000fa00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1009.629357][T30554] loop2: detected capacity change from 0 to 512 [ 1009.630711][T30553] loop3: detected capacity change from 0 to 512 [ 1009.636822][T30554] EXT4-fs (loop2): Invalid log block size: 250 [ 1009.651658][ C0] sd 0:0:1:0: tag#7283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1009.661511][ C0] sd 0:0:1:0: tag#7283 CDB: opcode=0xe5 (vendor) [ 1009.662461][T30553] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1009.667863][ C0] sd 0:0:1:0: tag#7283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1009.667896][ C0] sd 0:0:1:0: tag#7283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1009.677949][T30553] EXT4-fs (loop3): group descriptors corrupted! [ 1009.680815][ C1] sd 0:0:1:0: tag#7284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1009.686976][ C0] sd 0:0:1:0: tag#7283 CDB[20]: ba [ 1009.695994][ C1] sd 0:0:1:0: tag#7284 CDB: opcode=0xe5 (vendor) [ 1009.723423][ C1] sd 0:0:1:0: tag#7284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1009.732491][ C1] sd 0:0:1:0: tag#7284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1009.741558][ C1] sd 0:0:1:0: tag#7284 CDB[20]: ba 17:30:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2e2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1009.850218][T30554] loop2: detected capacity change from 0 to 512 [ 1009.857271][T30554] EXT4-fs (loop2): Invalid log block size: 250 [ 1009.872797][T30553] loop3: detected capacity change from 0 to 512 17:30:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000fffe00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1009.903636][T30553] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1009.913809][T30553] EXT4-fs (loop3): group descriptors corrupted! 17:30:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000a0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1009.964583][T30566] loop2: detected capacity change from 0 to 512 [ 1009.973122][T30566] EXT4-fs (loop2): Invalid log block size: 254 [ 1009.996380][T30569] loop3: detected capacity change from 0 to 512 [ 1010.003672][T30569] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.013850][T30569] EXT4-fs (loop3): group descriptors corrupted! [ 1010.032235][T30566] loop2: detected capacity change from 0 to 512 17:30:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xefffffff}, 0x0) [ 1010.058226][T30566] EXT4-fs (loop2): Invalid log block size: 254 [ 1010.058874][T30569] loop3: detected capacity change from 0 to 512 [ 1010.076641][T30569] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.086824][T30569] EXT4-fs (loop3): group descriptors corrupted! 17:30:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000003ff00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2e8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1010.156593][T30574] loop2: detected capacity change from 0 to 512 [ 1010.165008][T30574] EXT4-fs (loop2): Invalid log block size: 255 17:30:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000b0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1010.208127][T30574] loop2: detected capacity change from 0 to 512 [ 1010.231465][T30574] EXT4-fs (loop2): Invalid log block size: 255 [ 1010.240166][T30579] loop3: detected capacity change from 0 to 512 [ 1010.281471][T30579] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.291620][T30579] EXT4-fs (loop3): group descriptors corrupted! [ 1010.380091][T30579] loop3: detected capacity change from 0 to 512 [ 1010.387435][T30579] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.397586][T30579] EXT4-fs (loop3): group descriptors corrupted! 17:30:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000200000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 1010.537232][T30586] loop3: detected capacity change from 0 to 512 [ 1010.550364][T30589] loop2: detected capacity change from 0 to 512 [ 1010.557081][ C1] sd 0:0:1:0: tag#7285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1010.566937][ C1] sd 0:0:1:0: tag#7285 CDB: opcode=0xe5 (vendor) [ 1010.573258][ C1] sd 0:0:1:0: tag#7285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:30:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2fe}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1010.582475][ C1] sd 0:0:1:0: tag#7285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1010.591526][ C1] sd 0:0:1:0: tag#7285 CDB[20]: ba [ 1010.593463][T30586] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.606743][T30586] EXT4-fs (loop3): group descriptors corrupted! [ 1010.613222][T30589] EXT4-fs (loop2): fragment/cluster size (2048) != block size (4096) [ 1010.699883][T30589] loop2: detected capacity change from 0 to 512 [ 1010.704106][T30586] loop3: detected capacity change from 0 to 512 [ 1010.714297][T30589] EXT4-fs (loop2): fragment/cluster size (2048) != block size (4096) 17:30:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000300000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1010.748855][T30586] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.759026][T30586] EXT4-fs (loop3): group descriptors corrupted! [ 1010.812596][T30600] loop2: detected capacity change from 0 to 512 17:30:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000d0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1010.862896][T30600] EXT4-fs (loop2): bad block size 8192 [ 1010.876602][T30602] loop3: detected capacity change from 0 to 512 [ 1010.887339][T30602] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.897483][T30602] EXT4-fs (loop3): group descriptors corrupted! [ 1010.908342][T30600] loop2: detected capacity change from 0 to 512 [ 1010.915040][T30600] EXT4-fs (loop2): bad block size 8192 [ 1010.927301][T30602] loop3: detected capacity change from 0 to 512 [ 1010.944193][T30602] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1010.954323][T30602] EXT4-fs (loop3): group descriptors corrupted! 17:30:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfcffffff}, 0x0) 17:30:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1011.044616][T30607] loop2: detected capacity change from 0 to 512 [ 1011.051770][T30607] EXT4-fs (loop2): bad block size 16384 17:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x300}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000e0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1011.090683][T30607] loop2: detected capacity change from 0 to 512 [ 1011.110849][T30607] EXT4-fs (loop2): bad block size 16384 [ 1011.126219][T30613] loop3: detected capacity change from 0 to 512 [ 1011.161325][T30613] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.171450][T30613] EXT4-fs (loop3): group descriptors corrupted! [ 1011.249064][T30613] loop3: detected capacity change from 0 to 512 [ 1011.257501][T30613] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.267680][T30613] EXT4-fs (loop3): group descriptors corrupted! [ 1011.302606][T30614] device veth4087 entered promiscuous mode 17:30:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000500000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000f0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfdffffff}, 0x0) 17:30:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x30e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1011.434125][T30624] loop2: detected capacity change from 0 to 512 [ 1011.445507][ C1] scsi_io_completion_action: 1 callbacks suppressed [ 1011.445544][ C1] sd 0:0:1:0: tag#7287 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1011.450470][T30624] EXT4-fs (loop2): bad block size 32768 [ 1011.452183][ C1] sd 0:0:1:0: tag#7287 CDB: opcode=0xe5 (vendor) [ 1011.465209][ C0] sd 0:0:1:0: tag#7288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1011.467514][ C1] sd 0:0:1:0: tag#7287 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1011.473811][ C0] sd 0:0:1:0: tag#7288 CDB: opcode=0xe5 (vendor) [ 1011.483607][ C1] sd 0:0:1:0: tag#7287 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1011.492621][ C0] sd 0:0:1:0: tag#7288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1011.498930][ C1] sd 0:0:1:0: tag#7287 CDB[20]: ba [ 1011.507937][ C0] sd 0:0:1:0: tag#7288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1011.526177][T30625] loop3: detected capacity change from 0 to 512 [ 1011.531062][ C0] sd 0:0:1:0: tag#7288 CDB[20]: ba [ 1011.621512][T30625] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.631626][T30625] EXT4-fs (loop3): group descriptors corrupted! [ 1011.660205][T30624] loop2: detected capacity change from 0 to 512 [ 1011.671681][T30624] EXT4-fs (loop2): bad block size 32768 [ 1011.680374][T30625] loop3: detected capacity change from 0 to 512 [ 1011.688966][T30625] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.699082][T30625] EXT4-fs (loop3): group descriptors corrupted! 17:30:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000600000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000004100000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1011.773266][T30632] device veth4090 entered promiscuous mode [ 1011.812392][T30637] loop2: detected capacity change from 0 to 512 [ 1011.820877][T30637] EXT4-fs (loop2): bad block size 65536 [ 1011.826894][T30639] loop3: detected capacity change from 0 to 512 [ 1011.875723][T30639] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.885977][T30639] EXT4-fs (loop3): group descriptors corrupted! 17:30:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x310}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfeffffff}, 0x0) [ 1011.920660][T30637] loop2: detected capacity change from 0 to 512 [ 1011.928836][T30637] EXT4-fs (loop2): bad block size 65536 [ 1011.934922][T30639] loop3: detected capacity change from 0 to 512 17:30:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000700000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1011.973031][T30639] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1011.983270][T30639] EXT4-fs (loop3): group descriptors corrupted! [ 1011.997909][T30641] loop2: detected capacity change from 0 to 512 [ 1012.030444][T30641] EXT4-fs (loop2): Invalid log block size: 7 17:30:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000020100000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.123640][T30641] loop2: detected capacity change from 0 to 512 [ 1012.130989][T30641] EXT4-fs (loop2): Invalid log block size: 7 [ 1012.187304][T30646] device veth4093 entered promiscuous mode [ 1012.193727][T30649] loop3: detected capacity change from 0 to 512 [ 1012.204625][T30649] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.214771][T30649] EXT4-fs (loop3): group descriptors corrupted! [ 1012.234235][T30644] __nla_validate_parse: 36 callbacks suppressed [ 1012.234249][T30644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.277326][T30649] loop3: detected capacity change from 0 to 512 17:30:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1012.303487][T30649] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.313612][T30649] EXT4-fs (loop3): group descriptors corrupted! [ 1012.331213][T30645] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x312}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1012.347843][ C0] sd 0:0:1:0: tag#7236 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1012.357695][ C0] sd 0:0:1:0: tag#7236 CDB: opcode=0xe5 (vendor) [ 1012.364016][ C0] sd 0:0:1:0: tag#7236 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1012.371902][T30657] loop2: detected capacity change from 0 to 512 [ 1012.373106][ C0] sd 0:0:1:0: tag#7236 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1012.387311][T30657] EXT4-fs (loop2): Invalid log block size: 8 [ 1012.388583][ C0] sd 0:0:1:0: tag#7236 CDB[20]: ba 17:30:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffff0300}, 0x0) [ 1012.407945][T30662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.408533][ C1] sd 0:0:1:0: tag#7237 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1012.427116][ C1] sd 0:0:1:0: tag#7237 CDB: opcode=0xe5 (vendor) [ 1012.433439][ C1] sd 0:0:1:0: tag#7237 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1012.442467][ C1] sd 0:0:1:0: tag#7237 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1012.451524][ C1] sd 0:0:1:0: tag#7237 CDB[20]: ba 17:30:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000110000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.508994][T30657] loop2: detected capacity change from 0 to 512 [ 1012.514044][T30668] loop3: detected capacity change from 0 to 512 [ 1012.521794][T30657] EXT4-fs (loop2): Invalid log block size: 8 [ 1012.529042][T30666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1012.538828][T30668] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.549069][T30668] EXT4-fs (loop3): group descriptors corrupted! 17:30:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.618516][T30668] loop3: detected capacity change from 0 to 512 [ 1012.619201][T30671] loop2: detected capacity change from 0 to 512 [ 1012.631647][T30668] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.641809][T30668] EXT4-fs (loop3): group descriptors corrupted! [ 1012.649074][T30671] EXT4-fs (loop2): Invalid log block size: 9 17:30:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000120000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.692520][T30671] loop2: detected capacity change from 0 to 512 [ 1012.708030][T30671] EXT4-fs (loop2): Invalid log block size: 9 [ 1012.714103][T30664] device veth4096 entered promiscuous mode [ 1012.739871][T30674] loop3: detected capacity change from 0 to 512 [ 1012.748377][T30674] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.759104][T30674] EXT4-fs (loop3): group descriptors corrupted! [ 1012.765773][T30662] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000a00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.806926][T30674] loop3: detected capacity change from 0 to 512 [ 1012.818062][T30674] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.828187][T30674] EXT4-fs (loop3): group descriptors corrupted! 17:30:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x316}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000130000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1012.850849][T30666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1012.851378][T30678] loop2: detected capacity change from 0 to 512 [ 1012.868343][T30678] EXT4-fs (loop2): Invalid log block size: 10 17:30:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffa888}, 0x0) [ 1012.905864][T30678] loop2: detected capacity change from 0 to 512 [ 1012.917251][T30678] EXT4-fs (loop2): Invalid log block size: 10 [ 1012.924823][T30682] loop3: detected capacity change from 0 to 512 [ 1012.938571][T30680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1012.956443][T30682] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1012.966556][T30682] EXT4-fs (loop3): group descriptors corrupted! [ 1013.019121][T30682] loop3: detected capacity change from 0 to 512 [ 1013.028495][T30682] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.038594][T30682] EXT4-fs (loop3): group descriptors corrupted! [ 1013.081634][T30683] device veth4099 entered promiscuous mode [ 1013.088886][T30685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:47 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000b00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000180000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1013.215605][T30680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1013.239560][ C0] sd 0:0:1:0: tag#7238 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1013.241740][T30694] loop2: detected capacity change from 0 to 512 [ 1013.249427][ C0] sd 0:0:1:0: tag#7238 CDB: opcode=0xe5 (vendor) [ 1013.262108][ C0] sd 0:0:1:0: tag#7238 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1013.271181][ C0] sd 0:0:1:0: tag#7238 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1013.280326][ C0] sd 0:0:1:0: tag#7238 CDB[20]: ba [ 1013.286273][T30693] loop3: detected capacity change from 0 to 512 [ 1013.304312][T30694] EXT4-fs (loop2): Invalid log block size: 11 [ 1013.312348][ C0] sd 0:0:1:0: tag#7239 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1013.322205][ C0] sd 0:0:1:0: tag#7239 CDB: opcode=0xe5 (vendor) [ 1013.328563][ C0] sd 0:0:1:0: tag#7239 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1013.337788][ C0] sd 0:0:1:0: tag#7239 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1013.346839][ C0] sd 0:0:1:0: tag#7239 CDB[20]: ba 17:30:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x320}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1013.364879][T30693] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.375050][T30693] EXT4-fs (loop3): group descriptors corrupted! [ 1013.386271][T30685] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1013.423647][T30694] loop2: detected capacity change from 0 to 512 [ 1013.434291][T30693] loop3: detected capacity change from 0 to 512 [ 1013.461991][T30694] EXT4-fs (loop2): Invalid log block size: 11 17:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1013.468336][T30693] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.478442][T30693] EXT4-fs (loop3): group descriptors corrupted! 17:30:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000200000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000c00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1013.584569][T30707] loop2: detected capacity change from 0 to 512 [ 1013.592580][T30709] loop3: detected capacity change from 0 to 512 [ 1013.600725][T30707] EXT4-fs (loop2): Invalid log block size: 12 [ 1013.607236][T30709] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.617433][T30709] EXT4-fs (loop3): group descriptors corrupted! [ 1013.632977][T30704] device veth4102 entered promiscuous mode [ 1013.654448][T30707] loop2: detected capacity change from 0 to 512 [ 1013.661870][T30709] loop3: detected capacity change from 0 to 512 [ 1013.672382][T30707] EXT4-fs (loop2): Invalid log block size: 12 [ 1013.680779][T30709] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.690894][T30709] EXT4-fs (loop3): group descriptors corrupted! 17:30:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000d00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x326}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000010200000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffff81}, 0x0) [ 1013.778278][T30715] loop2: detected capacity change from 0 to 512 [ 1013.806759][T30715] EXT4-fs (loop2): Invalid log block size: 13 [ 1013.852660][T30719] loop3: detected capacity change from 0 to 512 [ 1013.862998][T30715] loop2: detected capacity change from 0 to 512 [ 1013.884448][T30715] EXT4-fs (loop2): Invalid log block size: 13 [ 1013.891156][T30719] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.901298][T30719] EXT4-fs (loop3): group descriptors corrupted! [ 1013.948169][T30719] loop3: detected capacity change from 0 to 512 [ 1013.960133][T30719] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1013.970302][T30719] EXT4-fs (loop3): group descriptors corrupted! [ 1014.014486][T30722] device veth4105 entered promiscuous mode 17:30:48 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000220000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x32a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 1014.170856][T30733] loop2: detected capacity change from 0 to 512 [ 1014.177863][T30734] loop3: detected capacity change from 0 to 512 [ 1014.186562][T30733] EXT4-fs (loop2): Invalid log block size: 14 [ 1014.195330][T30734] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1014.205470][T30734] EXT4-fs (loop3): group descriptors corrupted! [ 1014.228536][ C0] sd 0:0:1:0: tag#7240 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1014.238385][ C0] sd 0:0:1:0: tag#7240 CDB: opcode=0xe5 (vendor) [ 1014.244709][ C0] sd 0:0:1:0: tag#7240 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1014.253755][ C0] sd 0:0:1:0: tag#7240 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1014.262809][ C0] sd 0:0:1:0: tag#7240 CDB[20]: ba [ 1014.318001][T30734] loop3: detected capacity change from 0 to 512 [ 1014.324946][T30733] loop2: detected capacity change from 0 to 512 [ 1014.341558][T30733] EXT4-fs (loop2): Invalid log block size: 14 [ 1014.357403][T30734] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1014.367545][T30734] EXT4-fs (loop3): group descriptors corrupted! 17:30:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000f00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000250000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1014.451717][T30739] device veth4108 entered promiscuous mode [ 1014.464178][T30746] loop3: detected capacity change from 0 to 512 [ 1014.472604][T30746] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1014.482785][T30746] EXT4-fs (loop3): group descriptors corrupted! [ 1014.486140][T30747] loop2: detected capacity change from 0 to 512 17:30:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1014.511524][T30747] EXT4-fs (loop2): Invalid log block size: 15 17:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffffc3}, 0x0) 17:30:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x336}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1014.552501][ C0] sd 0:0:1:0: tag#7241 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1014.562352][ C0] sd 0:0:1:0: tag#7241 CDB: opcode=0xe5 (vendor) [ 1014.568693][ C0] sd 0:0:1:0: tag#7241 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1014.577736][ C0] sd 0:0:1:0: tag#7241 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1014.586778][ C0] sd 0:0:1:0: tag#7241 CDB[20]: ba [ 1014.644965][T30747] loop2: detected capacity change from 0 to 512 [ 1014.646402][T30746] loop3: detected capacity change from 0 to 512 [ 1014.656139][T30747] EXT4-fs (loop2): Invalid log block size: 15 [ 1014.686341][T30746] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1014.696464][T30746] EXT4-fs (loop3): group descriptors corrupted! 17:30:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000001100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1014.762765][T30757] loop2: detected capacity change from 0 to 512 [ 1014.791544][T30757] EXT4-fs (loop2): Invalid log block size: 17 [ 1014.857162][T30757] loop2: detected capacity change from 0 to 512 [ 1014.870995][T30754] device veth4111 entered promiscuous mode [ 1014.881646][T30757] EXT4-fs (loop2): Invalid log block size: 17 17:30:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000022c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000001400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x33e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffffea}, 0x0) [ 1015.068927][T30767] loop3: detected capacity change from 0 to 512 [ 1015.081485][ C0] sd 0:0:1:0: tag#7242 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1015.091361][ C0] sd 0:0:1:0: tag#7242 CDB: opcode=0xe5 (vendor) [ 1015.097709][ C0] sd 0:0:1:0: tag#7242 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1015.106740][ C0] sd 0:0:1:0: tag#7242 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1015.115800][ C0] sd 0:0:1:0: tag#7242 CDB[20]: ba [ 1015.121454][T30770] loop2: detected capacity change from 0 to 512 [ 1015.144632][T30767] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.154732][T30767] EXT4-fs (loop3): group descriptors corrupted! [ 1015.161026][T30770] EXT4-fs (loop2): Invalid log block size: 20 [ 1015.249289][T30767] loop3: detected capacity change from 0 to 512 [ 1015.252260][T30770] loop2: detected capacity change from 0 to 512 [ 1015.262184][T30767] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.272281][T30767] EXT4-fs (loop3): group descriptors corrupted! [ 1015.301340][T30770] EXT4-fs (loop2): Invalid log block size: 20 17:30:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000002500000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000002e0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1015.352278][T30774] device veth4114 entered promiscuous mode 17:30:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1015.410904][T30779] loop3: detected capacity change from 0 to 512 [ 1015.421394][T30780] loop2: detected capacity change from 0 to 512 [ 1015.436239][T30780] EXT4-fs (loop2): Invalid log block size: 37 [ 1015.458220][T30779] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.460707][ C0] sd 0:0:1:0: tag#7243 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1015.468357][T30779] EXT4-fs (loop3): group descriptors corrupted! [ 1015.478120][ C0] sd 0:0:1:0: tag#7243 CDB: opcode=0xe5 (vendor) [ 1015.490785][ C0] sd 0:0:1:0: tag#7243 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1015.499830][ C0] sd 0:0:1:0: tag#7243 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffffef}, 0x0) [ 1015.508881][ C0] sd 0:0:1:0: tag#7243 CDB[20]: ba 17:30:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x35a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1015.575605][T30780] loop2: detected capacity change from 0 to 512 [ 1015.586807][T30780] EXT4-fs (loop2): Invalid log block size: 37 [ 1015.593278][T30779] loop3: detected capacity change from 0 to 512 [ 1015.622301][T30779] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.632466][T30779] EXT4-fs (loop3): group descriptors corrupted! 17:30:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000002e00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000022e0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1015.705147][T30791] loop2: detected capacity change from 0 to 512 [ 1015.737502][T30794] loop3: detected capacity change from 0 to 512 [ 1015.739883][T30791] EXT4-fs (loop2): Invalid log block size: 46 [ 1015.751222][T30794] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.761424][T30794] EXT4-fs (loop3): group descriptors corrupted! [ 1015.817841][T30794] loop3: detected capacity change from 0 to 512 [ 1015.824502][T30789] device veth4117 entered promiscuous mode [ 1015.830966][T30794] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1015.834681][T30791] loop2: detected capacity change from 0 to 512 [ 1015.841169][T30794] EXT4-fs (loop3): group descriptors corrupted! [ 1015.849872][T30791] EXT4-fs (loop2): Invalid log block size: 46 17:30:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x0, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002300000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000004400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x35c}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1015.980866][T30798] loop3: detected capacity change from 0 to 512 [ 1015.989720][T30802] loop2: detected capacity change from 0 to 512 [ 1016.008969][T30798] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.019097][T30798] EXT4-fs (loop3): group descriptors corrupted! 17:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 1016.025539][T30802] EXT4-fs (loop2): Invalid log block size: 68 [ 1016.068653][T30802] loop2: detected capacity change from 0 to 512 [ 1016.075485][T30798] loop3: detected capacity change from 0 to 512 [ 1016.084366][T30802] EXT4-fs (loop2): Invalid log block size: 68 [ 1016.096471][T30798] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.106638][T30798] EXT4-fs (loop3): group descriptors corrupted! 17:30:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000006400000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000320000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1016.190940][T30812] loop2: detected capacity change from 0 to 512 [ 1016.196265][T30810] loop3: detected capacity change from 0 to 512 [ 1016.198544][T30812] EXT4-fs (loop2): Invalid log block size: 100 [ 1016.211727][T30810] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.221868][T30810] EXT4-fs (loop3): group descriptors corrupted! [ 1016.251293][T30807] device veth4120 entered promiscuous mode [ 1016.259480][T30812] loop2: detected capacity change from 0 to 512 [ 1016.272857][T30810] loop3: detected capacity change from 0 to 512 [ 1016.281575][T30812] EXT4-fs (loop2): Invalid log block size: 100 17:30:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1016.321678][T30810] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.331783][T30810] EXT4-fs (loop3): group descriptors corrupted! 17:30:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000008900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x360}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1016.396019][T30819] loop2: detected capacity change from 0 to 512 17:30:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000003f0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1016.436274][T30819] EXT4-fs (loop2): Invalid log block size: 137 [ 1016.451864][T30821] loop3: detected capacity change from 0 to 512 17:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfffffffc}, 0x0) [ 1016.477429][T30821] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.487564][T30821] EXT4-fs (loop3): group descriptors corrupted! [ 1016.548190][T30819] loop2: detected capacity change from 0 to 512 [ 1016.548931][T30821] loop3: detected capacity change from 0 to 512 [ 1016.556932][T30819] EXT4-fs (loop2): Invalid log block size: 137 [ 1016.590689][T30821] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.600830][T30821] EXT4-fs (loop3): group descriptors corrupted! [ 1016.662166][T30826] device veth4123 entered promiscuous mode 17:30:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x0, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000d800000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000400000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x362}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfffffffd}, 0x0) [ 1016.861871][T30839] loop3: detected capacity change from 0 to 512 [ 1016.870926][T30838] loop2: detected capacity change from 0 to 512 [ 1016.880151][T30838] EXT4-fs (loop2): Invalid log block size: 216 [ 1016.884677][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 1016.884704][ C1] sd 0:0:1:0: tag#7250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1016.887066][T30839] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1016.893013][ C1] sd 0:0:1:0: tag#7250 CDB: opcode=0xe5 (vendor) [ 1016.893033][ C1] sd 0:0:1:0: tag#7250 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1016.902882][T30839] EXT4-fs (loop3): group descriptors corrupted! [ 1016.912908][ C1] sd 0:0:1:0: tag#7250 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1016.912938][ C1] sd 0:0:1:0: tag#7250 CDB[20]: ba 17:30:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000d900000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1017.023397][T30838] loop2: detected capacity change from 0 to 512 [ 1017.030161][T30839] loop3: detected capacity change from 0 to 512 [ 1017.037027][T30838] EXT4-fs (loop2): Invalid log block size: 216 [ 1017.043864][T30839] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1017.054012][T30839] EXT4-fs (loop3): group descriptors corrupted! [ 1017.113224][T30847] loop2: detected capacity change from 0 to 512 [ 1017.123188][T30847] EXT4-fs (loop2): Invalid log block size: 217 [ 1017.152388][T30844] device veth4126 entered promiscuous mode 17:30:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000003460000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1017.160159][T30847] loop2: detected capacity change from 0 to 512 [ 1017.170387][T30847] EXT4-fs (loop2): Invalid log block size: 217 [ 1017.194415][T30851] loop3: detected capacity change from 0 to 512 17:30:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1017.210804][T30851] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1017.220906][T30851] EXT4-fs (loop3): group descriptors corrupted! [ 1017.266528][ C1] sd 0:0:1:0: tag#7251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1017.276475][ C1] sd 0:0:1:0: tag#7251 CDB: opcode=0xe5 (vendor) [ 1017.282814][ C1] sd 0:0:1:0: tag#7251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1017.292715][ C1] sd 0:0:1:0: tag#7251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1017.302094][ C1] sd 0:0:1:0: tag#7251 CDB[20]: ba [ 1017.310624][T30843] __nla_validate_parse: 36 callbacks suppressed 17:30:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000da00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x366}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1017.310638][T30843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1017.320333][T30855] loop2: detected capacity change from 0 to 512 [ 1017.346955][T30855] EXT4-fs (loop2): Invalid log block size: 218 [ 1017.357352][T30851] loop3: detected capacity change from 0 to 512 17:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfffffffe}, 0x0) [ 1017.367739][T30851] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1017.378060][T30851] EXT4-fs (loop3): group descriptors corrupted! [ 1017.393552][T30855] loop2: detected capacity change from 0 to 512 [ 1017.402402][T30855] EXT4-fs (loop2): Invalid log block size: 218 [ 1017.402598][T30857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000db00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1017.474963][T30862] loop2: detected capacity change from 0 to 512 [ 1017.501309][T30862] EXT4-fs (loop2): Invalid log block size: 219 [ 1017.547976][T30862] loop2: detected capacity change from 0 to 512 [ 1017.554820][T30862] EXT4-fs (loop2): Invalid log block size: 219 [ 1017.581255][T30858] device veth4129 entered promiscuous mode [ 1017.601400][T30860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000480000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000dc00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x0, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1017.706718][T30857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1017.763989][T30869] loop3: detected capacity change from 0 to 512 [ 1017.777168][T30870] loop2: detected capacity change from 0 to 512 [ 1017.787733][T30869] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1017.795539][T30870] EXT4-fs (loop2): Invalid log block size: 220 [ 1017.798004][T30869] EXT4-fs (loop3): group descriptors corrupted! 17:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x1000000000}, 0x0) 17:30:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x370}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1017.812601][ C0] sd 0:0:1:0: tag#7252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1017.822443][ C0] sd 0:0:1:0: tag#7252 CDB: opcode=0xe5 (vendor) [ 1017.828783][ C0] sd 0:0:1:0: tag#7252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1017.837821][ C0] sd 0:0:1:0: tag#7252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1017.844576][T30874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1017.846867][ C0] sd 0:0:1:0: tag#7252 CDB[20]: ba [ 1017.910042][T30870] loop2: detected capacity change from 0 to 512 [ 1017.916914][T30876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1017.917239][T30870] EXT4-fs (loop2): Invalid log block size: 220 [ 1017.932806][T30869] loop3: detected capacity change from 0 to 512 [ 1017.940950][T30869] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1017.951067][T30869] EXT4-fs (loop3): group descriptors corrupted! 17:30:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000fa00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001480000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1018.035508][T30881] loop2: detected capacity change from 0 to 512 [ 1018.051629][T30881] EXT4-fs (loop2): Invalid log block size: 250 [ 1018.083235][T30885] loop3: detected capacity change from 0 to 512 [ 1018.091695][T30885] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1018.101812][T30885] EXT4-fs (loop3): group descriptors corrupted! [ 1018.123277][T30878] device veth4132 entered promiscuous mode [ 1018.124021][T30881] loop2: detected capacity change from 0 to 512 [ 1018.129320][T30874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1018.137363][T30881] EXT4-fs (loop2): Invalid log block size: 250 [ 1018.160127][T30885] loop3: detected capacity change from 0 to 512 [ 1018.167703][T30885] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 17:30:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xffffff7f}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000fe00000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1018.177840][T30885] EXT4-fs (loop3): group descriptors corrupted! [ 1018.191972][T30876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x100000000000}, 0x0) 17:30:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000004c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1018.257559][T30890] loop2: detected capacity change from 0 to 512 [ 1018.272833][T30890] EXT4-fs (loop2): Invalid log block size: 254 [ 1018.282363][T30895] loop3: detected capacity change from 0 to 512 [ 1018.296096][T30895] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 17:30:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x378}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1018.306225][T30895] EXT4-fs (loop3): group descriptors corrupted! [ 1018.314727][T30888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1018.318603][T30890] loop2: detected capacity change from 0 to 512 [ 1018.338975][T30890] EXT4-fs (loop2): Invalid log block size: 254 [ 1018.354833][T30895] loop3: detected capacity change from 0 to 512 [ 1018.363417][T30895] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1018.371625][T30894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1018.373610][T30895] EXT4-fs (loop3): group descriptors corrupted! 17:30:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000003000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1018.454782][T30903] loop2: detected capacity change from 0 to 512 [ 1018.462813][T30903] EXT4-fs (loop2): Invalid log block size: 768 [ 1018.517787][T30903] loop2: detected capacity change from 0 to 512 [ 1018.524524][T30903] EXT4-fs (loop2): Invalid log block size: 768 [ 1018.591847][T30901] device veth4135 entered promiscuous mode 17:30:52 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000014f0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000f911000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1018.662174][T30909] loop2: detected capacity change from 0 to 512 [ 1018.670566][T30911] loop3: detected capacity change from 0 to 512 [ 1018.678341][T30909] EXT4-fs (loop2): Invalid log block size: 4601 [ 1018.684911][T30911] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1018.687453][ C0] sd 0:0:1:0: tag#7253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1018.695043][T30911] EXT4-fs (loop3): group descriptors corrupted! [ 1018.704829][ C0] sd 0:0:1:0: tag#7253 CDB: opcode=0xe5 (vendor) [ 1018.717385][ C0] sd 0:0:1:0: tag#7253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1018.721639][ C1] sd 0:0:1:0: tag#7254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1018.726428][ C0] sd 0:0:1:0: tag#7253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1018.736226][ C1] sd 0:0:1:0: tag#7254 CDB: opcode=0xe5 (vendor) [ 1018.745398][ C0] sd 0:0:1:0: tag#7253 CDB[20]: ba 17:30:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x1000000000000}, 0x0) [ 1018.751709][ C1] sd 0:0:1:0: tag#7254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1018.765825][ C1] sd 0:0:1:0: tag#7254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1018.774859][ C1] sd 0:0:1:0: tag#7254 CDB[20]: ba 17:30:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x37c}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1018.860121][T30909] loop2: detected capacity change from 0 to 512 [ 1018.867820][T30911] loop3: detected capacity change from 0 to 512 [ 1018.900592][T30909] EXT4-fs (loop2): Invalid log block size: 4601 [ 1018.900773][T30911] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1018.916980][T30911] EXT4-fs (loop3): group descriptors corrupted! 17:30:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000818000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001520000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1019.004874][T30925] loop2: detected capacity change from 0 to 512 [ 1019.040728][T30927] loop3: detected capacity change from 0 to 512 [ 1019.048026][T30925] EXT4-fs (loop2): Invalid log block size: 6152 [ 1019.055879][T30927] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.066126][T30927] EXT4-fs (loop3): group descriptors corrupted! [ 1019.087674][T30925] loop2: detected capacity change from 0 to 512 [ 1019.094411][T30925] EXT4-fs (loop2): Invalid log block size: 6152 17:30:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000b18000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1019.127416][T30927] loop3: detected capacity change from 0 to 512 [ 1019.142288][T30927] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.152470][T30927] EXT4-fs (loop3): group descriptors corrupted! [ 1019.160694][T30922] device veth4138 entered promiscuous mode 17:30:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4000000000000}, 0x0) [ 1019.174292][T30930] loop2: detected capacity change from 0 to 512 [ 1019.193687][T30930] EXT4-fs (loop2): Invalid log block size: 6155 17:30:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001530000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x382}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1019.264934][T30935] loop3: detected capacity change from 0 to 512 [ 1019.274390][T30930] loop2: detected capacity change from 0 to 512 [ 1019.285205][T30930] EXT4-fs (loop2): Invalid log block size: 6155 [ 1019.291578][T30935] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.301690][T30935] EXT4-fs (loop3): group descriptors corrupted! [ 1019.387457][T30935] loop3: detected capacity change from 0 to 512 [ 1019.399284][T30935] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.409411][T30935] EXT4-fs (loop3): group descriptors corrupted! 17:30:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000c18000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001540000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1019.540585][ C1] sd 0:0:1:0: tag#7255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1019.542222][T30942] loop2: detected capacity change from 0 to 512 [ 1019.550425][ C1] sd 0:0:1:0: tag#7255 CDB: opcode=0xe5 (vendor) [ 1019.550446][ C1] sd 0:0:1:0: tag#7255 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1019.559180][T30946] loop3: detected capacity change from 0 to 512 [ 1019.563030][ C1] sd 0:0:1:0: tag#7255 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1019.563051][ C1] sd 0:0:1:0: tag#7255 CDB[20]: ba [ 1019.583208][T30942] EXT4-fs (loop2): Invalid log block size: 6156 [ 1019.587475][T30939] device veth4141 entered promiscuous mode [ 1019.600486][ C1] sd 0:0:1:0: tag#7256 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1019.614416][ C1] sd 0:0:1:0: tag#7256 CDB: opcode=0xe5 (vendor) [ 1019.620751][ C1] sd 0:0:1:0: tag#7256 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1019.629127][T30946] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.629902][ C1] sd 0:0:1:0: tag#7256 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1019.639934][T30946] EXT4-fs (loop3): group descriptors corrupted! [ 1019.648963][ C1] sd 0:0:1:0: tag#7256 CDB[20]: ba [ 1019.679727][T30942] loop2: detected capacity change from 0 to 512 [ 1019.689695][T30942] EXT4-fs (loop2): Invalid log block size: 6156 17:30:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000d18000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8000000000000}, 0x0) [ 1019.720273][T30946] loop3: detected capacity change from 0 to 512 [ 1019.735678][T30946] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.745812][T30946] EXT4-fs (loop3): group descriptors corrupted! 17:30:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x38e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000015e0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1019.765048][T30951] loop2: detected capacity change from 0 to 512 [ 1019.775857][T30951] EXT4-fs (loop2): Invalid log block size: 6157 [ 1019.782542][T30939] device veth4142 entered promiscuous mode [ 1019.827073][T30951] loop2: detected capacity change from 0 to 512 [ 1019.855806][T30958] loop3: detected capacity change from 0 to 512 [ 1019.862312][T30951] EXT4-fs (loop2): Invalid log block size: 6157 [ 1019.890711][T30958] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1019.900925][T30958] EXT4-fs (loop3): group descriptors corrupted! 17:30:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000e18000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1019.991682][T30962] loop2: detected capacity change from 0 to 512 [ 1019.998434][T30958] loop3: detected capacity change from 0 to 512 [ 1020.009766][T30962] EXT4-fs (loop2): Invalid log block size: 6158 [ 1020.018665][T30958] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.028856][T30958] EXT4-fs (loop3): group descriptors corrupted! [ 1020.062984][T30959] device veth4143 entered promiscuous mode [ 1020.063193][T30962] loop2: detected capacity change from 0 to 512 [ 1020.085609][T30962] EXT4-fs (loop2): Invalid log block size: 6158 17:30:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000015f0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x40030000000000}, 0x0) 17:30:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000040000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1020.195600][T30968] loop3: detected capacity change from 0 to 512 [ 1020.203900][T30969] loop2: detected capacity change from 0 to 512 [ 1020.210731][T30968] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.220838][T30968] EXT4-fs (loop3): group descriptors corrupted! [ 1020.229028][T30969] EXT4-fs (loop2): Invalid log block size: 16384 [ 1020.307279][T30968] loop3: detected capacity change from 0 to 512 [ 1020.311440][T30969] loop2: detected capacity change from 0 to 512 [ 1020.320343][T30968] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.330677][T30968] EXT4-fs (loop3): group descriptors corrupted! [ 1020.331895][T30969] EXT4-fs (loop2): Invalid log block size: 16384 17:30:54 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x392}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000600000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000003e7f000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1020.463872][ C1] sd 0:0:1:0: tag#7257 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1020.473772][ C1] sd 0:0:1:0: tag#7257 CDB: opcode=0xe5 (vendor) [ 1020.476898][T30978] loop3: detected capacity change from 0 to 512 [ 1020.480127][ C1] sd 0:0:1:0: tag#7257 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1020.495379][ C1] sd 0:0:1:0: tag#7257 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1020.504417][ C1] sd 0:0:1:0: tag#7257 CDB[20]: ba [ 1020.527679][T30983] loop2: detected capacity change from 0 to 512 [ 1020.543844][ C1] sd 0:0:1:0: tag#7258 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1020.553705][ C1] sd 0:0:1:0: tag#7258 CDB: opcode=0xe5 (vendor) [ 1020.555097][T30978] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.560056][ C1] sd 0:0:1:0: tag#7258 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1020.560077][ C1] sd 0:0:1:0: tag#7258 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1020.570153][T30978] EXT4-fs (loop3): group descriptors corrupted! [ 1020.579170][ C1] sd 0:0:1:0: tag#7258 CDB[20]: ba [ 1020.583462][T30983] EXT4-fs (loop2): Invalid log block size: 32574 [ 1020.662800][T30984] device veth4146 entered promiscuous mode [ 1020.669409][T30983] loop2: detected capacity change from 0 to 512 [ 1020.678497][T30978] loop3: detected capacity change from 0 to 512 [ 1020.705587][T30983] EXT4-fs (loop2): Invalid log block size: 32574 [ 1020.712371][T30978] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.722527][T30978] EXT4-fs (loop3): group descriptors corrupted! 17:30:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000095000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000680000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1020.805430][T30993] loop2: detected capacity change from 0 to 512 [ 1020.815996][T30993] EXT4-fs (loop2): Invalid log block size: 38144 [ 1020.821012][T30995] loop3: detected capacity change from 0 to 512 [ 1020.837058][T30995] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.847245][T30995] EXT4-fs (loop3): group descriptors corrupted! [ 1020.859918][T30993] loop2: detected capacity change from 0 to 512 [ 1020.867606][T30993] EXT4-fs (loop2): Invalid log block size: 38144 17:30:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000009c000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1020.904604][T30995] loop3: detected capacity change from 0 to 512 [ 1020.914651][T30995] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1020.924788][T30995] EXT4-fs (loop3): group descriptors corrupted! 17:30:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x39a}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x200000000000000}, 0x0) 17:30:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000006c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1020.969567][T30997] loop2: detected capacity change from 0 to 512 [ 1021.006886][T30997] EXT4-fs (loop2): Invalid log block size: 39936 [ 1021.031651][T31003] loop3: detected capacity change from 0 to 512 [ 1021.049451][T31003] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.059574][T31003] EXT4-fs (loop3): group descriptors corrupted! [ 1021.092501][T30997] loop2: detected capacity change from 0 to 512 [ 1021.105525][T30997] EXT4-fs (loop2): Invalid log block size: 39936 [ 1021.141166][T31003] loop3: detected capacity change from 0 to 512 [ 1021.162840][T31003] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.173070][T31003] EXT4-fs (loop3): group descriptors corrupted! [ 1021.243457][T31005] device veth4149 entered promiscuous mode 17:30:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000feff000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000026e0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1021.357132][T31012] loop3: detected capacity change from 0 to 512 [ 1021.369039][T31012] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.370110][T31011] loop2: detected capacity change from 0 to 512 [ 1021.379344][T31012] EXT4-fs (loop3): group descriptors corrupted! [ 1021.390602][T31011] EXT4-fs (loop2): Invalid log block size: 65534 17:30:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x300000000000000}, 0x0) 17:30:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x39e}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1021.401428][ C0] sd 0:0:1:0: tag#7259 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1021.411265][ C0] sd 0:0:1:0: tag#7259 CDB: opcode=0xe5 (vendor) [ 1021.417583][ C0] sd 0:0:1:0: tag#7259 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1021.426645][ C0] sd 0:0:1:0: tag#7259 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1021.435669][ C0] sd 0:0:1:0: tag#7259 CDB[20]: ba [ 1021.469167][T31012] loop3: detected capacity change from 0 to 512 [ 1021.476008][T31011] loop2: detected capacity change from 0 to 512 [ 1021.496214][T31011] EXT4-fs (loop2): Invalid log block size: 65534 [ 1021.502792][T31012] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.512926][T31012] EXT4-fs (loop3): group descriptors corrupted! 17:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000ffff030001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000026f0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1021.602006][T31024] loop2: detected capacity change from 0 to 512 [ 1021.609869][T31024] EXT4-fs (loop2): Invalid log block size: 262143 [ 1021.647584][T31027] loop3: detected capacity change from 0 to 512 [ 1021.659677][T31024] loop2: detected capacity change from 0 to 512 [ 1021.665852][T31027] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.676261][T31027] EXT4-fs (loop3): group descriptors corrupted! [ 1021.685332][T31024] EXT4-fs (loop2): Invalid log block size: 262143 17:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000f2ffff7f01000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1021.707418][T31027] loop3: detected capacity change from 0 to 512 [ 1021.714117][T31027] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.724298][T31027] EXT4-fs (loop3): group descriptors corrupted! [ 1021.736599][T31022] device veth4152 entered promiscuous mode [ 1021.768832][T31029] loop2: detected capacity change from 0 to 512 [ 1021.779732][T31029] EXT4-fs (loop2): Invalid log block size: 2147483634 17:30:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002720000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x400000000000000}, 0x0) [ 1021.834255][T31032] loop3: detected capacity change from 0 to 512 [ 1021.856356][T31032] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1021.866511][T31032] EXT4-fs (loop3): group descriptors corrupted! [ 1021.877091][T31029] loop2: detected capacity change from 0 to 512 [ 1021.897820][T31029] EXT4-fs (loop2): Invalid log block size: 2147483634 [ 1021.923416][T31032] loop3: detected capacity change from 0 to 512 [ 1021.932146][T31032] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! 17:30:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ae}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1021.942339][T31032] EXT4-fs (loop3): group descriptors corrupted! [ 1022.132421][T31038] device veth4155 entered promiscuous mode 17:30:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000f8ffff7f01000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002730000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1022.259431][T31043] loop3: detected capacity change from 0 to 512 [ 1022.268176][T31045] loop2: detected capacity change from 0 to 512 [ 1022.277904][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 1022.277930][ C0] sd 0:0:1:0: tag#7265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1022.291972][T31045] EXT4-fs (loop2): Invalid log block size: 2147483640 [ 1022.294464][ C0] sd 0:0:1:0: tag#7265 CDB: opcode=0xe5 (vendor) 17:30:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3b8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x500000000000000}, 0x0) [ 1022.307533][ C0] sd 0:0:1:0: tag#7265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1022.315989][T31043] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.316575][ C0] sd 0:0:1:0: tag#7265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1022.326688][T31043] EXT4-fs (loop3): group descriptors corrupted! [ 1022.335619][ C0] sd 0:0:1:0: tag#7265 CDB[20]: ba [ 1022.370871][T31050] __nla_validate_parse: 33 callbacks suppressed [ 1022.370886][T31050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1022.380878][ C0] sd 0:0:1:0: tag#7266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1022.396431][ C0] sd 0:0:1:0: tag#7266 CDB: opcode=0xe5 (vendor) [ 1022.402774][ C0] sd 0:0:1:0: tag#7266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1022.411834][ C0] sd 0:0:1:0: tag#7266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1022.420995][ C0] sd 0:0:1:0: tag#7266 CDB[20]: ba [ 1022.428823][T31045] loop2: detected capacity change from 0 to 512 [ 1022.438479][T31045] EXT4-fs (loop2): Invalid log block size: 2147483640 17:30:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000f9ffff7f01000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1022.473167][T31043] loop3: detected capacity change from 0 to 512 [ 1022.485805][T31054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1022.501172][T31043] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.511295][T31043] EXT4-fs (loop3): group descriptors corrupted! 17:30:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000740000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1022.550441][T31059] loop2: detected capacity change from 0 to 512 [ 1022.589685][T31059] EXT4-fs (loop2): Invalid log block size: 2147483641 [ 1022.615909][T31062] loop3: detected capacity change from 0 to 512 [ 1022.623166][T31062] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.633346][T31062] EXT4-fs (loop3): group descriptors corrupted! [ 1022.646791][T31059] loop2: detected capacity change from 0 to 512 [ 1022.653161][T31055] device veth4158 entered promiscuous mode [ 1022.659887][T31059] EXT4-fs (loop2): Invalid log block size: 2147483641 [ 1022.667982][T31062] loop3: detected capacity change from 0 to 512 [ 1022.676940][T31062] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.687112][T31062] EXT4-fs (loop3): group descriptors corrupted! 17:30:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000c0ffffff01000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1022.711182][T31050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000760000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1022.759728][T31066] loop2: detected capacity change from 0 to 512 [ 1022.787713][T31066] EXT4-fs (loop2): Invalid log block size: 4294967232 [ 1022.799848][T31054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1022.806556][T31068] loop3: detected capacity change from 0 to 512 [ 1022.817011][T31068] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.827117][T31068] EXT4-fs (loop3): group descriptors corrupted! 17:30:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3be}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 1022.850587][T31066] loop2: detected capacity change from 0 to 512 [ 1022.861647][T31066] EXT4-fs (loop2): Invalid log block size: 4294967232 [ 1022.878635][T31068] loop3: detected capacity change from 0 to 512 [ 1022.884906][T31070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1022.894588][T31068] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1022.904713][T31068] EXT4-fs (loop3): group descriptors corrupted! [ 1022.969365][T31072] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000feffffff01000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002760000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1023.081528][T31073] device veth4161 entered promiscuous mode [ 1023.138647][T31070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1023.142318][T31079] loop2: detected capacity change from 0 to 512 [ 1023.152017][T31080] loop3: detected capacity change from 0 to 512 [ 1023.169885][T31080] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.180101][T31080] EXT4-fs (loop3): group descriptors corrupted! [ 1023.188420][T31079] EXT4-fs (loop2): Invalid log block size: 4294967294 [ 1023.206555][ C1] sd 0:0:1:0: tag#7272 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1023.216407][ C1] sd 0:0:1:0: tag#7272 CDB: opcode=0xe5 (vendor) [ 1023.222730][ C1] sd 0:0:1:0: tag#7272 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1023.231781][ C1] sd 0:0:1:0: tag#7272 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1023.240832][ C1] sd 0:0:1:0: tag#7272 CDB[20]: ba [ 1023.255763][T31074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:30:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3c8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1023.287269][T31079] loop2: detected capacity change from 0 to 512 [ 1023.293974][T31080] loop3: detected capacity change from 0 to 512 [ 1023.309652][T31079] EXT4-fs (loop2): Invalid log block size: 4294967294 [ 1023.317285][T31080] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.323700][ C1] sd 0:0:1:0: tag#7273 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1023.327498][T31080] EXT4-fs (loop3): group descriptors corrupted! [ 1023.337280][ C1] sd 0:0:1:0: tag#7273 CDB: opcode=0xe5 (vendor) [ 1023.337299][ C1] sd 0:0:1:0: tag#7273 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1023.358849][ C1] sd 0:0:1:0: tag#7273 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1023.367888][ C1] sd 0:0:1:0: tag#7273 CDB[20]: ba [ 1023.383687][T31087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:30:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000200000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x700000000000000}, 0x0) 17:30:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002770000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1023.475128][T31090] loop2: detected capacity change from 0 to 512 [ 1023.496329][T31090] EXT4-fs (loop2): Invalid log block size: 33554433 [ 1023.510216][T31094] loop3: detected capacity change from 0 to 512 [ 1023.517944][T31094] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.528175][T31094] EXT4-fs (loop3): group descriptors corrupted! [ 1023.534508][T31088] device veth4164 entered promiscuous mode [ 1023.542044][T31092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1023.552056][T31090] loop2: detected capacity change from 0 to 512 17:30:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000400000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1023.580429][T31090] EXT4-fs (loop2): Invalid log block size: 33554433 [ 1023.590349][T31094] loop3: detected capacity change from 0 to 512 [ 1023.604932][T31094] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.615253][T31094] EXT4-fs (loop3): group descriptors corrupted! 17:30:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ca}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1023.662544][T31098] loop2: detected capacity change from 0 to 512 [ 1023.692504][T31098] EXT4-fs (loop2): Invalid log block size: 67108865 17:30:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000007a0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1023.738798][T31098] loop2: detected capacity change from 0 to 512 [ 1023.747754][T31098] EXT4-fs (loop2): Invalid log block size: 67108865 17:30:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100004000000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1023.792263][T31103] loop3: detected capacity change from 0 to 512 [ 1023.818431][T31103] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.828607][T31103] EXT4-fs (loop3): group descriptors corrupted! [ 1023.874915][T31107] loop2: detected capacity change from 0 to 512 [ 1023.892966][T31107] EXT4-fs (loop2): Invalid log block size: 1073741825 [ 1023.902294][T31103] loop3: detected capacity change from 0 to 512 [ 1023.912024][T31103] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 1023.922261][T31103] EXT4-fs (loop3): group descriptors corrupted! [ 1023.946949][T31107] loop2: detected capacity change from 0 to 512 [ 1023.953242][T31105] device veth4167 entered promiscuous mode [ 1023.953593][T31107] EXT4-fs (loop2): Invalid log block size: 1073741825 17:30:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x800000000000000}, 0x0) 17:30:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001880000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000102000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1024.046418][T31113] loop3: detected capacity change from 0 to 512 [ 1024.052735][T31115] loop2: detected capacity change from 0 to 512 [ 1024.059690][T31113] EXT4-fs (loop3): bad geometry: first data block 136 is beyond end of filesystem (128) [ 1024.063562][ C0] sd 0:0:1:0: tag#7274 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1024.079250][ C0] sd 0:0:1:0: tag#7274 CDB: opcode=0xe5 (vendor) [ 1024.080029][T31115] EXT4-fs (loop2): Invalid log block size: 513 [ 1024.085574][ C0] sd 0:0:1:0: tag#7274 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1024.085596][ C0] sd 0:0:1:0: tag#7274 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1024.109805][ C0] sd 0:0:1:0: tag#7274 CDB[20]: ba 17:30:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xd0010000}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ce}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1024.179110][T31113] loop3: detected capacity change from 0 to 512 [ 1024.181144][T31115] loop2: detected capacity change from 0 to 512 [ 1024.196533][T31113] EXT4-fs (loop3): bad geometry: first data block 136 is beyond end of filesystem (128) [ 1024.231249][T31115] EXT4-fs (loop2): Invalid log block size: 513 17:30:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001890000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000103000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1024.327832][T31127] loop3: detected capacity change from 0 to 512 [ 1024.361818][T31130] loop2: detected capacity change from 0 to 512 17:30:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 1024.369130][T31127] EXT4-fs (loop3): bad geometry: first data block 137 is beyond end of filesystem (128) [ 1024.380829][T31130] EXT4-fs (loop2): Invalid log block size: 769 [ 1024.406234][T31125] device veth4170 entered promiscuous mode 17:30:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000104000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1024.437098][T31130] loop2: detected capacity change from 0 to 512 [ 1024.449914][T31130] EXT4-fs (loop2): Invalid log block size: 769 [ 1024.460992][T31127] loop3: detected capacity change from 0 to 512 [ 1024.469113][T31127] EXT4-fs (loop3): bad geometry: first data block 137 is beyond end of filesystem (128) 17:30:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000018c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1024.521330][T31137] loop2: detected capacity change from 0 to 512 [ 1024.541109][T31137] EXT4-fs (loop2): Invalid log block size: 1025 [ 1024.553802][T31139] loop3: detected capacity change from 0 to 512 17:30:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1024.583632][T31139] EXT4-fs (loop3): bad geometry: first data block 140 is beyond end of filesystem (128) [ 1024.618859][T31137] loop2: detected capacity change from 0 to 512 [ 1024.621427][ C1] sd 0:0:1:0: tag#7275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1024.634972][ C1] sd 0:0:1:0: tag#7275 CDB: opcode=0xe5 (vendor) [ 1024.636012][T31137] EXT4-fs (loop2): Invalid log block size: 1025 [ 1024.641338][ C1] sd 0:0:1:0: tag#7275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1024.656582][ C1] sd 0:0:1:0: tag#7275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1024.665599][ C1] sd 0:0:1:0: tag#7275 CDB[20]: ba [ 1024.728499][T31139] loop3: detected capacity change from 0 to 512 [ 1024.736023][T31139] EXT4-fs (loop3): bad geometry: first data block 140 is beyond end of filesystem (128) 17:30:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xa00000000000000}, 0x0) 17:30:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3d6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000105000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000018d0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1024.912672][ C0] sd 0:0:1:0: tag#7276 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1024.922545][ C0] sd 0:0:1:0: tag#7276 CDB: opcode=0xe5 (vendor) [ 1024.928897][ C0] sd 0:0:1:0: tag#7276 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1024.930135][T31150] loop3: detected capacity change from 0 to 512 [ 1024.937936][ C0] sd 0:0:1:0: tag#7276 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1024.945692][T31148] loop2: detected capacity change from 0 to 512 [ 1024.953199][ C0] sd 0:0:1:0: tag#7276 CDB[20]: ba [ 1024.967298][T31148] EXT4-fs (loop2): Invalid log block size: 1281 [ 1024.973895][T31150] EXT4-fs (loop3): bad geometry: first data block 141 is beyond end of filesystem (128) [ 1025.052321][T31150] loop3: detected capacity change from 0 to 512 [ 1025.058879][T31148] loop2: detected capacity change from 0 to 512 [ 1025.067237][T31150] EXT4-fs (loop3): bad geometry: first data block 141 is beyond end of filesystem (128) [ 1025.077029][T31148] EXT4-fs (loop2): Invalid log block size: 1281 17:30:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001900000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000106000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.151395][T31156] loop3: detected capacity change from 0 to 512 [ 1025.154737][T31158] loop2: detected capacity change from 0 to 512 [ 1025.166244][T31158] EXT4-fs (loop2): Invalid log block size: 1537 [ 1025.172876][T31156] EXT4-fs (loop3): bad geometry: first data block 144 is beyond end of filesystem (128) [ 1025.189463][T31153] device veth4173 entered promiscuous mode [ 1025.217756][T31158] loop2: detected capacity change from 0 to 512 [ 1025.248224][T31158] EXT4-fs (loop2): Invalid log block size: 1537 [ 1025.258498][T31156] loop3: detected capacity change from 0 to 512 17:30:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000107000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:30:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xb00000000000000}, 0x0) 17:30:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3d8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1025.282334][T31156] EXT4-fs (loop3): bad geometry: first data block 144 is beyond end of filesystem (128) 17:30:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001910000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.327059][T31161] loop2: detected capacity change from 0 to 512 [ 1025.365264][T31161] EXT4-fs (loop2): Invalid log block size: 1793 [ 1025.372147][T31165] loop3: detected capacity change from 0 to 512 [ 1025.395231][T31165] EXT4-fs (loop3): bad geometry: first data block 145 is beyond end of filesystem (128) 17:30:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r4, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000240)={{}, r4, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1025.458994][T31161] loop2: detected capacity change from 0 to 512 [ 1025.466021][T31161] EXT4-fs (loop2): Invalid log block size: 1793 [ 1025.493091][T31165] loop3: detected capacity change from 0 to 512 17:30:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000108000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.510133][T31165] EXT4-fs (loop3): bad geometry: first data block 145 is beyond end of filesystem (128) [ 1025.530453][T31174] loop2: detected capacity change from 0 to 512 [ 1025.537707][T31174] EXT4-fs (loop2): Invalid log block size: 2049 [ 1025.547023][ C0] sd 0:0:1:0: tag#7277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:30:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000039c0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.556907][ C0] sd 0:0:1:0: tag#7277 CDB: opcode=0xe5 (vendor) [ 1025.563245][ C0] sd 0:0:1:0: tag#7277 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1025.572269][ C0] sd 0:0:1:0: tag#7277 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1025.581372][ C0] sd 0:0:1:0: tag#7277 CDB[20]: ba [ 1025.587180][T31169] device veth4176 entered promiscuous mode [ 1025.625104][T31174] loop2: detected capacity change from 0 to 512 [ 1025.631551][T31178] loop3: detected capacity change from 0 to 512 [ 1025.647301][T31174] EXT4-fs (loop2): Invalid log block size: 2049 [ 1025.654096][T31178] EXT4-fs (loop3): bad geometry: first data block 156 is beyond end of filesystem (128) 17:30:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:30:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3da}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:30:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc00000000000000}, 0x0) 17:30:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000109000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.727716][T31178] loop3: detected capacity change from 0 to 512 [ 1025.735839][T31178] EXT4-fs (loop3): bad geometry: first data block 156 is beyond end of filesystem (128) [ 1025.771759][T31182] loop2: detected capacity change from 0 to 512 [ 1025.797297][T31182] EXT4-fs (loop2): Invalid log block size: 2305 [ 1025.805615][ C0] sd 0:0:1:0: tag#7278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1025.815467][ C0] sd 0:0:1:0: tag#7278 CDB: opcode=0xe5 (vendor) 17:30:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002a00000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1025.821820][ C0] sd 0:0:1:0: tag#7278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1025.830854][ C0] sd 0:0:1:0: tag#7278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1025.839892][ C0] sd 0:0:1:0: tag#7278 CDB[20]: ba [ 1025.853122][T31190] loop3: detected capacity change from 0 to 512 [ 1025.906344][T31190] EXT4-fs (loop3): bad geometry: first data block 160 is beyond end of filesystem (128) [ 1025.948552][T31190] loop3: detected capacity change from 0 to 512 [ 1025.958020][T31190] EXT4-fs (loop3): bad geometry: first data block 160 is beyond end of filesystem (128) [ 1025.958040][T31182] loop2: detected capacity change from 0 to 512 [ 1025.974231][T31182] EXT4-fs (loop2): Invalid log block size: 2305 17:31:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010a000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002a10000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1026.003010][T31188] device veth4179 entered promiscuous mode [ 1026.061394][T31194] loop2: detected capacity change from 0 to 512 [ 1026.101175][T31194] EXT4-fs (loop2): Invalid log block size: 2561 [ 1026.103363][T31196] loop3: detected capacity change from 0 to 512 17:31:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3e2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1026.138113][T31196] EXT4-fs (loop3): bad geometry: first data block 161 is beyond end of filesystem (128) [ 1026.149308][T31194] loop2: detected capacity change from 0 to 512 17:31:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xd00000000000000}, 0x0) [ 1026.188087][T31196] loop3: detected capacity change from 0 to 512 [ 1026.189399][T31194] EXT4-fs (loop2): Invalid log block size: 2561 [ 1026.201929][T31196] EXT4-fs (loop3): bad geometry: first data block 161 is beyond end of filesystem (128) 17:31:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002ab0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010b000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1026.381923][T31200] device veth4182 entered promiscuous mode [ 1026.413562][T31206] loop3: detected capacity change from 0 to 512 [ 1026.420235][T31209] loop2: detected capacity change from 0 to 512 [ 1026.447370][ C0] sd 0:0:1:0: tag#7279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1026.457234][ C0] sd 0:0:1:0: tag#7279 CDB: opcode=0xe5 (vendor) [ 1026.457315][T31209] EXT4-fs (loop2): Invalid log block size: 2817 [ 1026.463556][ C0] sd 0:0:1:0: tag#7279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1026.470951][T31206] EXT4-fs (loop3): bad geometry: first data block 171 is beyond end of filesystem (128) [ 1026.478833][ C0] sd 0:0:1:0: tag#7279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1026.478852][ C0] sd 0:0:1:0: tag#7279 CDB[20]: ba [ 1026.558863][T31206] loop3: detected capacity change from 0 to 512 [ 1026.573645][T31209] loop2: detected capacity change from 0 to 512 [ 1026.577750][T31206] EXT4-fs (loop3): bad geometry: first data block 171 is beyond end of filesystem (128) [ 1026.595801][T31209] EXT4-fs (loop2): Invalid log block size: 2817 17:31:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x0, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3e4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xe00000000000000}, 0x0) 17:31:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002ac0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010c000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1026.679180][T31218] loop2: detected capacity change from 0 to 512 [ 1026.692579][T31222] loop3: detected capacity change from 0 to 512 [ 1026.699768][T31218] EXT4-fs (loop2): Invalid log block size: 3073 [ 1026.707131][T31222] EXT4-fs (loop3): bad geometry: first data block 172 is beyond end of filesystem (128) [ 1026.770220][T31218] loop2: detected capacity change from 0 to 512 [ 1026.776650][T31222] loop3: detected capacity change from 0 to 512 [ 1026.797009][T31218] EXT4-fs (loop2): Invalid log block size: 3073 [ 1026.804904][T31222] EXT4-fs (loop3): bad geometry: first data block 172 is beyond end of filesystem (128) 17:31:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010d000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002ad0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1026.892222][T31228] loop3: detected capacity change from 0 to 512 [ 1026.904323][T31223] device veth4185 entered promiscuous mode [ 1026.912336][T31228] EXT4-fs (loop3): bad geometry: first data block 173 is beyond end of filesystem (128) [ 1026.926309][T31229] loop2: detected capacity change from 0 to 512 [ 1026.943989][T31229] EXT4-fs (loop2): Invalid log block size: 3329 [ 1026.955346][T31228] loop3: detected capacity change from 0 to 512 [ 1026.962208][T31228] EXT4-fs (loop3): bad geometry: first data block 173 is beyond end of filesystem (128) 17:31:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002b60000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1026.997310][T31229] loop2: detected capacity change from 0 to 512 [ 1027.004335][T31229] EXT4-fs (loop2): Invalid log block size: 3329 17:31:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 1027.103661][T31232] loop3: detected capacity change from 0 to 512 [ 1027.112123][T31232] EXT4-fs (loop3): bad geometry: first data block 182 is beyond end of filesystem (128) [ 1027.147228][T31232] loop3: detected capacity change from 0 to 512 [ 1027.157086][T31232] EXT4-fs (loop3): bad geometry: first data block 182 is beyond end of filesystem (128) 17:31:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010e000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3e8}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1027.333966][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 1027.333995][ C0] sd 0:0:1:0: tag#7285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1027.345320][T31240] loop2: detected capacity change from 0 to 512 [ 1027.350465][ C0] sd 0:0:1:0: tag#7285 CDB: opcode=0xe5 (vendor) [ 1027.363009][ C0] sd 0:0:1:0: tag#7285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1027.372052][ C0] sd 0:0:1:0: tag#7285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1027.381113][ C0] sd 0:0:1:0: tag#7285 CDB[20]: ba [ 1027.392565][T31240] EXT4-fs (loop2): Invalid log block size: 3585 [ 1027.448108][T31240] loop2: detected capacity change from 0 to 512 [ 1027.454394][T31244] device veth4188 entered promiscuous mode [ 1027.454854][T31240] EXT4-fs (loop2): Invalid log block size: 3585 [ 1027.470898][T31239] __nla_validate_parse: 34 callbacks suppressed [ 1027.470912][T31239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:01 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x0, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x1000000000000000}, 0x0) 17:31:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000e20000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010f000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1027.559164][T31250] loop2: detected capacity change from 0 to 512 [ 1027.567180][T31251] loop3: detected capacity change from 0 to 512 [ 1027.574172][T31250] EXT4-fs (loop2): Invalid log block size: 3841 [ 1027.580787][T31251] EXT4-fs (loop3): bad geometry: first data block 226 is beyond end of filesystem (128) [ 1027.586687][ C1] sd 0:0:1:0: tag#7286 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1027.600357][ C1] sd 0:0:1:0: tag#7286 CDB: opcode=0xe5 (vendor) 17:31:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ea}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1027.606713][ C1] sd 0:0:1:0: tag#7286 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1027.615765][ C1] sd 0:0:1:0: tag#7286 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1027.624793][ C1] sd 0:0:1:0: tag#7286 CDB[20]: ba [ 1027.630138][T31248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1027.728511][T31250] loop2: detected capacity change from 0 to 512 [ 1027.729368][T31251] loop3: detected capacity change from 0 to 512 [ 1027.741868][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1027.742848][T31250] EXT4-fs (loop2): Invalid log block size: 3841 [ 1027.758031][T31251] EXT4-fs (loop3): bad geometry: first data block 226 is beyond end of filesystem (128) 17:31:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000003e40000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000110000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1027.855832][T31263] loop2: detected capacity change from 0 to 512 [ 1027.856151][T31261] loop3: detected capacity change from 0 to 512 [ 1027.871925][T31263] EXT4-fs (loop2): Invalid log block size: 4097 [ 1027.880138][T31261] EXT4-fs (loop3): bad geometry: first data block 228 is beyond end of filesystem (128) 17:31:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000111000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1027.901641][T31259] device veth4191 entered promiscuous mode [ 1027.908300][T31263] loop2: detected capacity change from 0 to 512 [ 1027.916902][T31263] EXT4-fs (loop2): Invalid log block size: 4097 [ 1027.918415][T31248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x1100000000000000}, 0x0) [ 1027.951106][T31261] loop3: detected capacity change from 0 to 512 [ 1027.955927][T31267] loop2: detected capacity change from 0 to 512 [ 1027.963921][T31261] EXT4-fs (loop3): bad geometry: first data block 228 is beyond end of filesystem (128) [ 1027.973624][T31257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1027.998022][T31267] EXT4-fs (loop2): Invalid log block size: 4353 [ 1028.036728][T31267] loop2: detected capacity change from 0 to 512 [ 1028.057828][T31267] EXT4-fs (loop2): Invalid log block size: 4353 [ 1028.064908][T31269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000002e60000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3ee}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1028.199008][T31269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1028.208956][T31275] loop3: detected capacity change from 0 to 512 [ 1028.217256][T31277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1028.226841][T31275] EXT4-fs (loop3): bad geometry: first data block 230 is beyond end of filesystem (128) [ 1028.259955][ C0] sd 0:0:1:0: tag#7294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1028.269829][ C0] sd 0:0:1:0: tag#7294 CDB: opcode=0xe5 (vendor) [ 1028.276177][ C0] sd 0:0:1:0: tag#7294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1028.285198][ C0] sd 0:0:1:0: tag#7294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1028.294245][ C0] sd 0:0:1:0: tag#7294 CDB[20]: ba [ 1028.348621][T31275] loop3: detected capacity change from 0 to 512 [ 1028.356431][T31275] EXT4-fs (loop3): bad geometry: first data block 230 is beyond end of filesystem (128) 17:31:02 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x0, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000112000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x1200000000000000}, 0x0) 17:31:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000003e60000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1028.417067][T31280] device veth4194 entered promiscuous mode [ 1028.437501][T31283] loop2: detected capacity change from 0 to 512 [ 1028.449262][T31285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1028.460004][T31288] loop3: detected capacity change from 0 to 512 [ 1028.462033][ C0] sd 0:0:1:0: tag#7295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1028.467770][T31283] EXT4-fs (loop2): Invalid log block size: 4609 [ 1028.476198][ C0] sd 0:0:1:0: tag#7295 CDB: opcode=0xe5 (vendor) [ 1028.476217][ C0] sd 0:0:1:0: tag#7295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1028.476251][ C0] sd 0:0:1:0: tag#7295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1028.506863][ C0] sd 0:0:1:0: tag#7295 CDB[20]: ba [ 1028.507007][T31288] EXT4-fs (loop3): bad geometry: first data block 230 is beyond end of filesystem (128) [ 1028.578098][T31277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1028.590378][T31283] loop2: detected capacity change from 0 to 512 [ 1028.611072][T31283] EXT4-fs (loop2): Invalid log block size: 4609 [ 1028.618979][T31288] loop3: detected capacity change from 0 to 512 17:31:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f0}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1028.637670][T31288] EXT4-fs (loop3): bad geometry: first data block 230 is beyond end of filesystem (128) 17:31:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000122000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000c0ed0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 1028.707657][T31297] loop2: detected capacity change from 0 to 512 [ 1028.740458][T31297] EXT4-fs (loop2): Invalid log block size: 8705 [ 1028.799414][T31302] loop3: detected capacity change from 0 to 512 [ 1028.810809][T31302] EXT4-fs (loop3): bad geometry: first data block 237 is beyond end of filesystem (128) [ 1028.822439][T31297] loop2: detected capacity change from 0 to 512 [ 1028.832515][T31297] EXT4-fs (loop2): Invalid log block size: 8705 [ 1028.845669][T31299] device veth4197 entered promiscuous mode [ 1028.873701][T31302] loop3: detected capacity change from 0 to 512 [ 1028.907163][T31302] EXT4-fs (loop3): bad geometry: first data block 237 is beyond end of filesystem (128) 17:31:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000125000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1028.990337][T31306] loop2: detected capacity change from 0 to 512 [ 1029.007965][T31306] EXT4-fs (loop2): Invalid log block size: 9473 17:31:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000003f40000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f2}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1029.056730][T31306] loop2: detected capacity change from 0 to 512 [ 1029.068854][T31306] EXT4-fs (loop2): Invalid log block size: 9473 [ 1029.116511][T31309] loop3: detected capacity change from 0 to 512 [ 1029.125632][T31309] EXT4-fs (loop3): bad geometry: first data block 244 is beyond end of filesystem (128) [ 1029.167180][ C0] sd 0:0:1:0: tag#7232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1029.177025][ C0] sd 0:0:1:0: tag#7232 CDB: opcode=0xe5 (vendor) [ 1029.183383][ C0] sd 0:0:1:0: tag#7232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1029.192431][ C0] sd 0:0:1:0: tag#7232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1029.201470][ C0] sd 0:0:1:0: tag#7232 CDB[20]: ba [ 1029.239188][T31309] loop3: detected capacity change from 0 to 512 [ 1029.246040][T31309] EXT4-fs (loop3): bad geometry: first data block 244 is beyond end of filesystem (128) [ 1029.264077][T31313] device veth4200 entered promiscuous mode 17:31:03 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000012e000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x2100000000000000}, 0x0) 17:31:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001fc0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1029.371729][T31321] loop3: detected capacity change from 0 to 512 [ 1029.371978][ C0] sd 0:0:1:0: tag#7233 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1029.379487][T31320] loop2: detected capacity change from 0 to 512 [ 1029.387811][ C0] sd 0:0:1:0: tag#7233 CDB: opcode=0xe5 (vendor) [ 1029.387830][ C0] sd 0:0:1:0: tag#7233 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1029.409446][ C0] sd 0:0:1:0: tag#7233 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:31:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f6}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1029.409568][T31321] EXT4-fs (loop3): bad geometry: first data block 252 is beyond end of filesystem (128) [ 1029.418501][ C0] sd 0:0:1:0: tag#7233 CDB[20]: ba [ 1029.430250][T31320] EXT4-fs (loop2): Invalid log block size: 11777 [ 1029.502932][T31320] loop2: detected capacity change from 0 to 512 [ 1029.509516][T31321] loop3: detected capacity change from 0 to 512 [ 1029.517418][T31320] EXT4-fs (loop2): Invalid log block size: 11777 [ 1029.540890][T31321] EXT4-fs (loop3): bad geometry: first data block 252 is beyond end of filesystem (128) 17:31:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000148000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000001fd0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1029.607151][T31331] loop2: detected capacity change from 0 to 512 [ 1029.631465][T31331] EXT4-fs (loop2): Invalid log block size: 18433 [ 1029.650234][T31333] loop3: detected capacity change from 0 to 512 [ 1029.659241][T31333] EXT4-fs (loop3): bad geometry: first data block 253 is beyond end of filesystem (128) [ 1029.671281][T31331] loop2: detected capacity change from 0 to 512 [ 1029.678200][T31331] EXT4-fs (loop2): Invalid log block size: 18433 [ 1029.692415][T31329] device veth4203 entered promiscuous mode 17:31:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000014c000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x2e02000000000000}, 0x0) [ 1029.716297][T31333] loop3: detected capacity change from 0 to 512 [ 1029.757581][T31333] EXT4-fs (loop3): bad geometry: first data block 253 is beyond end of filesystem (128) [ 1029.779256][T31337] loop2: detected capacity change from 0 to 512 [ 1029.787932][T31337] EXT4-fs (loop2): Invalid log block size: 19457 [ 1029.830334][T31337] loop2: detected capacity change from 0 to 512 [ 1029.857423][T31337] EXT4-fs (loop2): Invalid log block size: 19457 17:31:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000fffe0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3fa}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1030.029866][T31344] loop3: detected capacity change from 0 to 512 [ 1030.042507][T31344] EXT4-fs (loop3): bad geometry: first data block 254 is beyond end of filesystem (128) [ 1030.068538][ C1] sd 0:0:1:0: tag#7234 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1030.078394][ C1] sd 0:0:1:0: tag#7234 CDB: opcode=0xe5 (vendor) [ 1030.084735][ C1] sd 0:0:1:0: tag#7234 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1030.093780][ C1] sd 0:0:1:0: tag#7234 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1030.102823][ C1] sd 0:0:1:0: tag#7234 CDB[20]: ba [ 1030.143221][T31344] loop3: detected capacity change from 0 to 512 [ 1030.152274][T31344] EXT4-fs (loop3): bad geometry: first data block 254 is beyond end of filesystem (128) 17:31:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x0, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000160000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 17:31:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000fff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1030.191787][T31348] device veth4206 entered promiscuous mode [ 1030.238387][T31350] loop2: detected capacity change from 0 to 512 [ 1030.260423][T31355] loop3: detected capacity change from 0 to 512 [ 1030.269902][ C1] sd 0:0:1:0: tag#7235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1030.279752][ C1] sd 0:0:1:0: tag#7235 CDB: opcode=0xe5 (vendor) 17:31:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3fe}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1030.286089][ C1] sd 0:0:1:0: tag#7235 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1030.295127][ C1] sd 0:0:1:0: tag#7235 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1030.304168][ C1] sd 0:0:1:0: tag#7235 CDB[20]: ba [ 1030.314585][T31350] EXT4-fs (loop2): Invalid log block size: 24577 [ 1030.321495][T31355] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (128) [ 1030.367948][T31355] loop3: detected capacity change from 0 to 512 [ 1030.371699][T31350] loop2: detected capacity change from 0 to 512 [ 1030.395065][T31355] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (128) [ 1030.395901][T31350] EXT4-fs (loop2): Invalid log block size: 24577 17:31:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000feff0000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000168000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4000000000000000}, 0x0) [ 1030.508385][T31364] loop3: detected capacity change from 0 to 512 [ 1030.521235][T31366] loop2: detected capacity change from 0 to 512 [ 1030.527587][T31361] device veth4207 entered promiscuous mode [ 1030.533833][T31364] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (128) [ 1030.545662][T31366] EXT4-fs (loop2): Invalid log block size: 26625 [ 1030.589122][T31364] loop3: detected capacity change from 0 to 512 [ 1030.603870][T31364] EXT4-fs (loop3): bad geometry: first data block 255 is beyond end of filesystem (128) [ 1030.619132][T31366] loop2: detected capacity change from 0 to 512 17:31:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x500}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1030.633449][T31366] EXT4-fs (loop2): Invalid log block size: 26625 [ 1030.812557][T31374] device veth4210 entered promiscuous mode 17:31:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000016c000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000200000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1030.920522][T31382] loop2: detected capacity change from 0 to 512 [ 1030.923353][T31383] loop3: detected capacity change from 0 to 512 [ 1030.929006][T31382] EXT4-fs (loop2): Invalid log block size: 27649 [ 1030.939662][T31383] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (128) [ 1030.950229][ C0] sd 0:0:1:0: tag#7236 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1030.960070][ C0] sd 0:0:1:0: tag#7236 CDB: opcode=0xe5 (vendor) [ 1030.966423][ C0] sd 0:0:1:0: tag#7236 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1030.975457][ C0] sd 0:0:1:0: tag#7236 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1030.984539][ C0] sd 0:0:1:0: tag#7236 CDB[20]: ba [ 1031.008094][T31382] loop2: detected capacity change from 0 to 512 [ 1031.017117][T31382] EXT4-fs (loop2): Invalid log block size: 27649 [ 1031.029030][T31383] loop3: detected capacity change from 0 to 512 [ 1031.035637][T31383] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (128) 17:31:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x0, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4603000000000000}, 0x0) 17:31:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x59f}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000172000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffff0300000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1031.123108][T31392] loop3: detected capacity change from 0 to 512 [ 1031.141543][T31391] loop2: detected capacity change from 0 to 512 [ 1031.148440][T31392] EXT4-fs (loop3): bad geometry: first data block 1023 is beyond end of filesystem (128) [ 1031.160182][T31391] EXT4-fs (loop2): Invalid log block size: 29185 [ 1031.171404][ C1] sd 0:0:1:0: tag#7237 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1031.181233][ C1] sd 0:0:1:0: tag#7237 CDB: opcode=0xe5 (vendor) [ 1031.187613][ C1] sd 0:0:1:0: tag#7237 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1031.196649][ C1] sd 0:0:1:0: tag#7237 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1031.205668][ C1] sd 0:0:1:0: tag#7237 CDB[20]: ba [ 1031.215269][T31392] loop3: detected capacity change from 0 to 512 [ 1031.215918][T31391] loop2: detected capacity change from 0 to 512 [ 1031.229588][T31391] EXT4-fs (loop2): Invalid log block size: 29185 [ 1031.236647][T31392] EXT4-fs (loop3): bad geometry: first data block 1023 is beyond end of filesystem (128) 17:31:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000173000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000400000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1031.341968][T31401] loop2: detected capacity change from 0 to 512 [ 1031.351994][T31402] loop3: detected capacity change from 0 to 512 [ 1031.359670][T31401] EXT4-fs (loop2): Invalid log block size: 29441 [ 1031.369403][T31402] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (128) [ 1031.417369][T31401] loop2: detected capacity change from 0 to 512 [ 1031.426493][T31402] loop3: detected capacity change from 0 to 512 [ 1031.428247][T31401] EXT4-fs (loop2): Invalid log block size: 29441 [ 1031.432903][T31398] device veth4213 entered promiscuous mode [ 1031.449352][T31402] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (128) 17:31:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000174000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000700000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1031.513915][T31407] loop2: detected capacity change from 0 to 512 [ 1031.544174][T31407] EXT4-fs (loop2): Invalid log block size: 29697 [ 1031.550982][T31409] loop3: detected capacity change from 0 to 512 [ 1031.559914][T31409] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (128) [ 1031.617284][T31407] loop2: detected capacity change from 0 to 512 [ 1031.618026][T31409] loop3: detected capacity change from 0 to 512 [ 1031.626637][T31407] EXT4-fs (loop2): Invalid log block size: 29697 [ 1031.636500][T31409] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (128) 17:31:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5c4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x471b6c9800000000}, 0x0) 17:31:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x0, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000175000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000800000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1031.962313][T31416] device veth4216 entered promiscuous mode [ 1032.039545][T31423] loop2: detected capacity change from 0 to 512 [ 1032.046666][T31424] loop3: detected capacity change from 0 to 512 [ 1032.057277][T31423] EXT4-fs (loop2): Invalid log block size: 29953 [ 1032.063877][T31424] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (128) 17:31:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5c5}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1032.118186][T31424] loop3: detected capacity change from 0 to 512 [ 1032.125614][T31423] loop2: detected capacity change from 0 to 512 [ 1032.133058][T31424] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (128) [ 1032.149774][T31423] EXT4-fs (loop2): Invalid log block size: 29953 17:31:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4800000000000000}, 0x0) 17:31:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000017a000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000c00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1032.270025][T31435] loop2: detected capacity change from 0 to 512 [ 1032.271211][T31436] loop3: detected capacity change from 0 to 512 [ 1032.284282][T31435] EXT4-fs (loop2): Invalid log block size: 31233 [ 1032.300406][T31436] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (128) [ 1032.346736][T31435] loop2: detected capacity change from 0 to 512 [ 1032.355709][T31435] EXT4-fs (loop2): Invalid log block size: 31233 [ 1032.362215][T31436] loop3: detected capacity change from 0 to 512 [ 1032.368859][T31436] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (128) [ 1032.385331][T31432] device veth4219 entered promiscuous mode 17:31:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001fe000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffff1f00000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1032.470474][T31441] loop3: detected capacity change from 0 to 512 [ 1032.475491][T31444] loop2: detected capacity change from 0 to 512 [ 1032.485124][T31441] EXT4-fs (loop3): bad geometry: first data block 8191 is beyond end of filesystem (128) [ 1032.497672][T31444] EXT4-fs (loop2): Invalid log block size: 65025 [ 1032.528243][T31431] __nla_validate_parse: 31 callbacks suppressed [ 1032.528256][T31431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1032.566342][T31441] loop3: detected capacity change from 0 to 512 [ 1032.572990][T31441] EXT4-fs (loop3): bad geometry: first data block 8191 is beyond end of filesystem (128) [ 1032.585454][T31444] loop2: detected capacity change from 0 to 512 [ 1032.609435][T31444] EXT4-fs (loop2): Invalid log block size: 65025 17:31:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xd00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4a00000000000000}, 0x0) [ 1032.686698][T31447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1032.752542][T31450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1032.780294][T31448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000001000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001fc010001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1032.917359][T31458] loop2: detected capacity change from 0 to 512 [ 1032.918378][T31459] loop3: detected capacity change from 0 to 512 [ 1032.924668][T31458] EXT4-fs (loop2): Invalid log block size: 130049 [ 1032.939791][T31459] EXT4-fs (loop3): bad geometry: first data block 65536 is beyond end of filesystem (128) [ 1032.969602][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 1032.969629][ C1] sd 0:0:1:0: tag#7246 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1032.986199][ C1] sd 0:0:1:0: tag#7246 CDB: opcode=0xe5 (vendor) [ 1032.992535][ C1] sd 0:0:1:0: tag#7246 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1033.001586][ C1] sd 0:0:1:0: tag#7246 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1033.010638][ C1] sd 0:0:1:0: tag#7246 CDB[20]: ba 17:31:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r6, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r6, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1033.022467][T31447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1033.035432][T31458] loop2: detected capacity change from 0 to 512 [ 1033.046213][T31459] loop3: detected capacity change from 0 to 512 [ 1033.062622][T31458] EXT4-fs (loop2): Invalid log block size: 130049 [ 1033.084841][T31459] EXT4-fs (loop3): bad geometry: first data block 65536 is beyond end of filesystem (128) [ 1033.095108][T31448] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x602}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000104020001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.135009][ C0] sd 0:0:1:0: tag#7247 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1033.144874][ C0] sd 0:0:1:0: tag#7247 CDB: opcode=0xe5 (vendor) [ 1033.151239][ C0] sd 0:0:1:0: tag#7247 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1033.160282][ C0] sd 0:0:1:0: tag#7247 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1033.169316][ C0] sd 0:0:1:0: tag#7247 CDB[20]: ba 17:31:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 17:31:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000002000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.195327][T31467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1033.213489][T31469] loop2: detected capacity change from 0 to 512 [ 1033.243087][T31469] EXT4-fs (loop2): Invalid log block size: 132097 [ 1033.293334][T31471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.294581][T31474] loop3: detected capacity change from 0 to 512 [ 1033.325490][T31469] loop2: detected capacity change from 0 to 512 [ 1033.329785][T31474] EXT4-fs (loop3): bad geometry: first data block 131072 is beyond end of filesystem (128) [ 1033.360442][T31469] EXT4-fs (loop2): Invalid log block size: 132097 17:31:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100030001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.410419][T31474] loop3: detected capacity change from 0 to 512 [ 1033.444000][T31474] EXT4-fs (loop3): bad geometry: first data block 131072 is beyond end of filesystem (128) [ 1033.444756][T31477] loop2: detected capacity change from 0 to 512 [ 1033.469021][T31477] EXT4-fs (loop2): Invalid log block size: 196609 [ 1033.474395][T31467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x700}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000202000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.550944][T31471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1033.560732][T31477] loop2: detected capacity change from 0 to 512 [ 1033.575663][T31477] EXT4-fs (loop2): Invalid log block size: 196609 17:31:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x4f01000000000000}, 0x0) [ 1033.609421][T31485] loop3: detected capacity change from 0 to 512 [ 1033.639029][T31485] EXT4-fs (loop3): bad geometry: first data block 131584 is beyond end of filesystem (128) [ 1033.717529][T31485] loop3: detected capacity change from 0 to 512 [ 1033.727387][T31485] EXT4-fs (loop3): bad geometry: first data block 131584 is beyond end of filesystem (128) 17:31:07 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001fb030001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.808971][T31492] loop2: detected capacity change from 0 to 512 [ 1033.818524][T31488] device veth4228 entered promiscuous mode [ 1033.830324][ C0] sd 0:0:1:0: tag#7248 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1033.837540][T31492] EXT4-fs (loop2): Invalid log block size: 260865 [ 1033.840185][ C0] sd 0:0:1:0: tag#7248 CDB: opcode=0xe5 (vendor) 17:31:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000402000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1033.852855][ C0] sd 0:0:1:0: tag#7248 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1033.861905][ C0] sd 0:0:1:0: tag#7248 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1033.862898][T31497] loop3: detected capacity change from 0 to 512 [ 1033.870967][ C0] sd 0:0:1:0: tag#7248 CDB[20]: ba [ 1033.890693][T31497] EXT4-fs (loop3): bad geometry: first data block 132096 is beyond end of filesystem (128) 17:31:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0xa8010000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1033.941659][T31497] loop3: detected capacity change from 0 to 512 [ 1033.950286][T31492] loop2: detected capacity change from 0 to 512 [ 1033.957068][T31497] EXT4-fs (loop3): bad geometry: first data block 132096 is beyond end of filesystem (128) [ 1033.968660][T31492] EXT4-fs (loop2): Invalid log block size: 260865 17:31:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000003000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000102040001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x801}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1034.051125][T31503] loop3: detected capacity change from 0 to 512 [ 1034.066060][T31503] EXT4-fs (loop3): bad geometry: first data block 196608 is beyond end of filesystem (128) [ 1034.077772][T31507] loop2: detected capacity change from 0 to 512 [ 1034.102013][T31507] EXT4-fs (loop2): Invalid log block size: 262657 17:31:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 1034.153219][T31503] loop3: detected capacity change from 0 to 512 [ 1034.174970][T31503] EXT4-fs (loop3): bad geometry: first data block 196608 is beyond end of filesystem (128) [ 1034.195855][T31507] loop2: detected capacity change from 0 to 512 17:31:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1034.218246][T31507] EXT4-fs (loop2): Invalid log block size: 262657 [ 1034.235582][ C0] sd 0:0:1:0: tag#7249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1034.245435][ C0] sd 0:0:1:0: tag#7249 CDB: opcode=0xe5 (vendor) [ 1034.251780][ C0] sd 0:0:1:0: tag#7249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:31:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000004000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1034.260824][ C0] sd 0:0:1:0: tag#7249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1034.269864][ C0] sd 0:0:1:0: tag#7249 CDB[20]: ba 17:31:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000106040001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1034.330503][T31517] loop3: detected capacity change from 0 to 512 [ 1034.367015][T31517] EXT4-fs (loop3): bad geometry: first data block 262144 is beyond end of filesystem (128) [ 1034.379302][T31520] loop2: detected capacity change from 0 to 512 [ 1034.411557][T31520] EXT4-fs (loop2): Invalid log block size: 263681 [ 1034.421024][T31517] loop3: detected capacity change from 0 to 512 [ 1034.430137][T31517] EXT4-fs (loop3): bad geometry: first data block 262144 is beyond end of filesystem (128) [ 1034.448208][T31520] loop2: detected capacity change from 0 to 512 [ 1034.466215][T31520] EXT4-fs (loop2): Invalid log block size: 263681 17:31:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x900}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000005000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000110040001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x4]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x6558000000000000}, 0x0) [ 1034.677369][T31523] device veth4234 entered promiscuous mode [ 1034.694767][T31525] loop3: detected capacity change from 0 to 512 [ 1034.703972][T31527] loop2: detected capacity change from 0 to 512 [ 1034.722441][T31525] EXT4-fs (loop3): bad geometry: first data block 327680 is beyond end of filesystem (128) [ 1034.733764][ C1] sd 0:0:1:0: tag#7250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1034.743620][ C1] sd 0:0:1:0: tag#7250 CDB: opcode=0xe5 (vendor) [ 1034.749999][ C1] sd 0:0:1:0: tag#7250 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1034.759214][ C1] sd 0:0:1:0: tag#7250 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1034.768261][ C1] sd 0:0:1:0: tag#7250 CDB[20]: ba [ 1034.774263][T31527] EXT4-fs (loop2): Invalid log block size: 266241 17:31:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xa00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1034.827573][T31525] loop3: detected capacity change from 0 to 512 [ 1034.834580][T31527] loop2: detected capacity change from 0 to 512 [ 1034.858020][T31527] EXT4-fs (loop2): Invalid log block size: 266241 [ 1034.867614][T31525] EXT4-fs (loop3): bad geometry: first data block 327680 is beyond end of filesystem (128) 17:31:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000006000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100050001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1034.955537][T31541] loop3: detected capacity change from 0 to 512 [ 1034.978000][T31543] loop2: detected capacity change from 0 to 512 [ 1034.987730][T31541] EXT4-fs (loop3): bad geometry: first data block 393216 is beyond end of filesystem (128) [ 1034.999417][T31543] EXT4-fs (loop2): Invalid log block size: 327681 [ 1035.053651][T31543] loop2: detected capacity change from 0 to 512 [ 1035.060658][T31543] EXT4-fs (loop2): Invalid log block size: 327681 [ 1035.067921][T31541] loop3: detected capacity change from 0 to 512 17:31:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1035.096679][T31541] EXT4-fs (loop3): bad geometry: first data block 393216 is beyond end of filesystem (128) [ 1035.133884][ C1] sd 0:0:1:0: tag#7251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000019f050001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1035.143744][ C1] sd 0:0:1:0: tag#7251 CDB: opcode=0xe5 (vendor) [ 1035.150085][ C1] sd 0:0:1:0: tag#7251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1035.159121][ C1] sd 0:0:1:0: tag#7251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1035.168151][ C1] sd 0:0:1:0: tag#7251 CDB[20]: ba 17:31:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000406000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1035.203634][T31548] loop2: detected capacity change from 0 to 512 [ 1035.216341][T31548] EXT4-fs (loop2): Invalid log block size: 368385 17:31:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x6800000000000000}, 0x0) 17:31:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1035.249036][T31550] loop3: detected capacity change from 0 to 512 [ 1035.262795][T31550] EXT4-fs (loop3): bad geometry: first data block 394240 is beyond end of filesystem (128) [ 1035.297585][T31548] loop2: detected capacity change from 0 to 512 [ 1035.304200][T31548] EXT4-fs (loop2): Invalid log block size: 368385 [ 1035.311798][T31550] loop3: detected capacity change from 0 to 512 [ 1035.321997][T31550] EXT4-fs (loop3): bad geometry: first data block 394240 is beyond end of filesystem (128) 17:31:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000007000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001c5050001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1035.428720][T31558] loop3: detected capacity change from 0 to 512 [ 1035.451422][T31560] loop2: detected capacity change from 0 to 512 [ 1035.460485][T31558] EXT4-fs (loop3): bad geometry: first data block 458752 is beyond end of filesystem (128) [ 1035.463645][T31560] EXT4-fs (loop2): Invalid log block size: 378113 17:31:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x4]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1035.538120][T31558] loop3: detected capacity change from 0 to 512 [ 1035.545150][T31560] loop2: detected capacity change from 0 to 512 [ 1035.553348][T31556] device veth4240 entered promiscuous mode [ 1035.567762][T31558] EXT4-fs (loop3): bad geometry: first data block 458752 is beyond end of filesystem (128) [ 1035.578931][T31560] EXT4-fs (loop2): Invalid log block size: 378113 17:31:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x6c00000000000000}, 0x0) [ 1035.605678][ C1] sd 0:0:1:0: tag#7252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1035.615542][ C1] sd 0:0:1:0: tag#7252 CDB: opcode=0xe5 (vendor) [ 1035.621896][ C1] sd 0:0:1:0: tag#7252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1035.630979][ C1] sd 0:0:1:0: tag#7252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1035.640114][ C1] sd 0:0:1:0: tag#7252 CDB[20]: ba 17:31:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100060001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000008000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1035.781012][T31571] loop2: detected capacity change from 0 to 512 [ 1035.782789][T31573] loop3: detected capacity change from 0 to 512 [ 1035.796085][T31571] EXT4-fs (loop2): Invalid log block size: 393217 [ 1035.802878][T31573] EXT4-fs (loop3): bad geometry: first data block 524288 is beyond end of filesystem (128) [ 1035.849089][T31571] loop2: detected capacity change from 0 to 512 [ 1035.861136][T31571] EXT4-fs (loop2): Invalid log block size: 393217 [ 1035.871449][T31573] loop3: detected capacity change from 0 to 512 [ 1035.897985][T31573] EXT4-fs (loop3): bad geometry: first data block 524288 is beyond end of filesystem (128) 17:31:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000104060001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000009000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1036.037577][T31583] loop2: detected capacity change from 0 to 512 [ 1036.037626][T31582] loop3: detected capacity change from 0 to 512 [ 1036.045666][ C0] sd 0:0:1:0: tag#7253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1036.060070][ C0] sd 0:0:1:0: tag#7253 CDB: opcode=0xe5 (vendor) [ 1036.066445][ C0] sd 0:0:1:0: tag#7253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1036.075471][ C0] sd 0:0:1:0: tag#7253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1036.075611][T31582] EXT4-fs (loop3): bad geometry: first data block 589824 is beyond end of filesystem (128) [ 1036.084954][ C0] sd 0:0:1:0: tag#7253 CDB[20]: ba [ 1036.102249][T31583] EXT4-fs (loop2): Invalid log block size: 394241 [ 1036.127404][T31583] loop2: detected capacity change from 0 to 512 17:31:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xd00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1036.129924][T31582] loop3: detected capacity change from 0 to 512 [ 1036.141898][T31582] EXT4-fs (loop3): bad geometry: first data block 589824 is beyond end of filesystem (128) [ 1036.152099][T31583] EXT4-fs (loop2): Invalid log block size: 394241 17:31:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100070001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x7400000000000000}, 0x0) 17:31:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000a000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1036.239240][T31588] loop2: detected capacity change from 0 to 512 [ 1036.249100][T31588] EXT4-fs (loop2): Invalid log block size: 458753 [ 1036.257878][T31592] loop3: detected capacity change from 0 to 512 [ 1036.268646][T31592] EXT4-fs (loop3): bad geometry: first data block 655360 is beyond end of filesystem (128) [ 1036.337936][T31592] loop3: detected capacity change from 0 to 512 [ 1036.337973][T31588] loop2: detected capacity change from 0 to 512 [ 1036.338349][T31588] EXT4-fs (loop2): Invalid log block size: 458753 [ 1036.358963][T31592] EXT4-fs (loop3): bad geometry: first data block 655360 is beyond end of filesystem (128) [ 1036.375030][T31587] device veth4246 entered promiscuous mode 17:31:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x4]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000b000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100090001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1036.478404][T31601] loop3: detected capacity change from 0 to 512 [ 1036.482898][ C0] sd 0:0:1:0: tag#7254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1036.485011][T31602] loop2: detected capacity change from 0 to 512 [ 1036.494509][ C0] sd 0:0:1:0: tag#7254 CDB: opcode=0xe5 (vendor) [ 1036.494530][ C0] sd 0:0:1:0: tag#7254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1036.507256][T31601] EXT4-fs (loop3): bad geometry: first data block 720896 is beyond end of filesystem (128) [ 1036.516179][ C0] sd 0:0:1:0: tag#7254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1036.516198][ C0] sd 0:0:1:0: tag#7254 CDB[20]: ba [ 1036.572775][T31602] EXT4-fs (loop2): Invalid log block size: 589825 17:31:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xe00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1036.613010][T31602] loop2: detected capacity change from 0 to 512 [ 1036.621846][T31601] loop3: detected capacity change from 0 to 512 [ 1036.637286][T31601] EXT4-fs (loop3): bad geometry: first data block 720896 is beyond end of filesystem (128) [ 1036.647759][T31602] EXT4-fs (loop2): Invalid log block size: 589825 17:31:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 17:31:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000a0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1036.921589][T31614] loop3: detected capacity change from 0 to 512 [ 1036.923844][T31616] loop2: detected capacity change from 0 to 512 [ 1036.935687][T31614] EXT4-fs (loop3): bad geometry: first data block 786432 is beyond end of filesystem (128) [ 1036.948197][T31616] EXT4-fs (loop2): Invalid log block size: 655361 [ 1036.958059][ C1] sd 0:0:1:0: tag#7255 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1036.967890][ C1] sd 0:0:1:0: tag#7255 CDB: opcode=0xe5 (vendor) [ 1036.974216][ C1] sd 0:0:1:0: tag#7255 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1036.983262][ C1] sd 0:0:1:0: tag#7255 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1036.992296][ C1] sd 0:0:1:0: tag#7255 CDB[20]: ba [ 1037.010131][T31616] loop2: detected capacity change from 0 to 512 17:31:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xe03}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1037.017569][T31614] loop3: detected capacity change from 0 to 512 [ 1037.024702][T31616] EXT4-fs (loop2): Invalid log block size: 655361 [ 1037.033127][T31614] EXT4-fs (loop3): bad geometry: first data block 786432 is beyond end of filesystem (128) 17:31:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x7c02000000000000}, 0x0) 17:31:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000b0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000d000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1037.144443][T31625] loop2: detected capacity change from 0 to 512 [ 1037.144573][T31626] loop3: detected capacity change from 0 to 512 [ 1037.151777][T31625] EXT4-fs (loop2): Invalid log block size: 720897 [ 1037.166509][T31626] EXT4-fs (loop3): bad geometry: first data block 851968 is beyond end of filesystem (128) [ 1037.210429][T31625] loop2: detected capacity change from 0 to 512 [ 1037.240436][T31626] loop3: detected capacity change from 0 to 512 [ 1037.248241][T31625] EXT4-fs (loop2): Invalid log block size: 720897 [ 1037.255381][T31626] EXT4-fs (loop3): bad geometry: first data block 851968 is beyond end of filesystem (128) 17:31:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x0, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000c0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000e000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1037.333456][T31631] loop2: detected capacity change from 0 to 512 [ 1037.342428][T31631] EXT4-fs (loop2): Invalid log block size: 786433 [ 1037.353782][T31634] loop3: detected capacity change from 0 to 512 [ 1037.385494][T31634] EXT4-fs (loop3): bad geometry: first data block 917504 is beyond end of filesystem (128) [ 1037.396610][T31631] loop2: detected capacity change from 0 to 512 [ 1037.412189][T31631] EXT4-fs (loop2): Invalid log block size: 786433 17:31:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000d0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1037.449032][T31634] loop3: detected capacity change from 0 to 512 [ 1037.476959][T31634] EXT4-fs (loop3): bad geometry: first data block 917504 is beyond end of filesystem (128) [ 1037.514985][T31639] loop2: detected capacity change from 0 to 512 [ 1037.529936][T31639] EXT4-fs (loop2): Invalid log block size: 851969 [ 1037.578659][T31641] __nla_validate_parse: 35 callbacks suppressed [ 1037.578674][T31641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1037.595425][T31639] loop2: detected capacity change from 0 to 512 [ 1037.623208][T31639] EXT4-fs (loop2): Invalid log block size: 851969 [ 1037.732944][T31642] device veth4255 entered promiscuous mode [ 1037.742368][T31642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, 0x0, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000f000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8000000000000000}, 0x0) 17:31:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000e0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1037.806756][T31647] loop3: detected capacity change from 0 to 512 [ 1037.809869][T31649] loop2: detected capacity change from 0 to 512 [ 1037.819474][T31647] EXT4-fs (loop3): bad geometry: first data block 983040 is beyond end of filesystem (128) [ 1037.833304][T31649] EXT4-fs (loop2): Invalid log block size: 917505 [ 1037.843503][T31650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1003}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1037.877828][T31647] loop3: detected capacity change from 0 to 512 [ 1037.885344][T31647] EXT4-fs (loop3): bad geometry: first data block 983040 is beyond end of filesystem (128) [ 1037.923793][T31649] loop2: detected capacity change from 0 to 512 [ 1037.931987][T31654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1037.942510][T31649] EXT4-fs (loop2): Invalid log block size: 917505 17:31:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000010000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000f0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1038.029319][T31658] loop3: detected capacity change from 0 to 512 [ 1038.049182][T31661] loop2: detected capacity change from 0 to 512 [ 1038.054416][T31650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.069511][T31661] EXT4-fs (loop2): Invalid log block size: 983041 [ 1038.079894][T31658] EXT4-fs (loop3): bad geometry: first data block 1048576 is beyond end of filesystem (128) [ 1038.116323][T31661] loop2: detected capacity change from 0 to 512 [ 1038.122976][T31658] loop3: detected capacity change from 0 to 512 [ 1038.139019][T31661] EXT4-fs (loop2): Invalid log block size: 983041 [ 1038.147835][T31658] EXT4-fs (loop3): bad geometry: first data block 1048576 is beyond end of filesystem (128) [ 1038.159160][T31654] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x0, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8100000000000000}, 0x0) 17:31:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000410000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000104100001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1038.245417][T31667] loop3: detected capacity change from 0 to 512 [ 1038.267863][T31671] loop2: detected capacity change from 0 to 512 [ 1038.274332][T31667] EXT4-fs (loop3): bad geometry: first data block 1049600 is beyond end of filesystem (128) [ 1038.274759][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 1038.274799][ C1] sd 0:0:1:0: tag#7262 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1038.285435][T31671] EXT4-fs (loop2): Invalid log block size: 1049601 [ 1038.291022][ C1] sd 0:0:1:0: tag#7262 CDB: opcode=0xe5 (vendor) [ 1038.291041][ C1] sd 0:0:1:0: tag#7262 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1038.322730][ C1] sd 0:0:1:0: tag#7262 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1038.331769][ C1] sd 0:0:1:0: tag#7262 CDB[20]: ba 17:31:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1100}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1038.337687][T31665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.435038][T31675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1038.451426][T31671] loop2: detected capacity change from 0 to 512 [ 1038.458586][T31667] loop3: detected capacity change from 0 to 512 [ 1038.474103][T31667] EXT4-fs (loop3): bad geometry: first data block 1049600 is beyond end of filesystem (128) [ 1038.501954][T31671] EXT4-fs (loop2): Invalid log block size: 1049601 [ 1038.521068][T31665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1038.587557][T31677] device veth4261 entered promiscuous mode [ 1038.642037][T31675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000120100001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000011000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x81ffffff00000000}, 0x0) 17:31:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1122}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1038.753460][T31685] loop3: detected capacity change from 0 to 512 [ 1038.762990][T31690] loop2: detected capacity change from 0 to 512 [ 1038.772001][T31685] EXT4-fs (loop3): bad geometry: first data block 1114112 is beyond end of filesystem (128) [ 1038.786763][ C1] sd 0:0:1:0: tag#7263 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1038.796662][ C1] sd 0:0:1:0: tag#7263 CDB: opcode=0xe5 (vendor) [ 1038.799944][T31690] EXT4-fs (loop2): Invalid log block size: 1056769 [ 1038.802988][ C1] sd 0:0:1:0: tag#7263 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1038.803010][ C1] sd 0:0:1:0: tag#7263 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1038.827655][ C1] sd 0:0:1:0: tag#7263 CDB[20]: ba 17:31:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100110001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1038.862403][T31690] loop2: detected capacity change from 0 to 512 [ 1038.872308][T31685] loop3: detected capacity change from 0 to 512 [ 1038.883004][T31690] EXT4-fs (loop2): Invalid log block size: 1056769 [ 1038.898276][T31685] EXT4-fs (loop3): bad geometry: first data block 1114112 is beyond end of filesystem (128) 17:31:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000012000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1038.937119][T31696] loop2: detected capacity change from 0 to 512 [ 1038.951585][T31696] EXT4-fs (loop2): Invalid log block size: 1114113 [ 1038.982708][T31693] device veth4264 entered promiscuous mode [ 1038.983275][T31698] loop3: detected capacity change from 0 to 512 [ 1038.997272][T31698] EXT4-fs (loop3): bad geometry: first data block 1179648 is beyond end of filesystem (128) [ 1039.017284][T31696] loop2: detected capacity change from 0 to 512 [ 1039.023979][T31696] EXT4-fs (loop2): Invalid log block size: 1114113 17:31:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x40, 0x0, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100120001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1200}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1039.067398][T31698] loop3: detected capacity change from 0 to 512 [ 1039.087610][T31698] EXT4-fs (loop3): bad geometry: first data block 1179648 is beyond end of filesystem (128) 17:31:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8601000000000000}, 0x0) [ 1039.139850][T31701] loop2: detected capacity change from 0 to 512 [ 1039.150566][T31701] EXT4-fs (loop2): Invalid log block size: 1179649 17:31:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000013000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1039.190846][ C1] sd 0:0:1:0: tag#7264 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1039.200714][ C1] sd 0:0:1:0: tag#7264 CDB: opcode=0xe5 (vendor) [ 1039.207056][ C1] sd 0:0:1:0: tag#7264 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1039.216119][ C1] sd 0:0:1:0: tag#7264 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1039.225206][ C1] sd 0:0:1:0: tag#7264 CDB[20]: ba [ 1039.237250][T31710] loop3: detected capacity change from 0 to 512 [ 1039.265690][T31710] EXT4-fs (loop3): bad geometry: first data block 1245184 is beyond end of filesystem (128) [ 1039.308860][T31701] loop2: detected capacity change from 0 to 512 [ 1039.335242][T31701] EXT4-fs (loop2): Invalid log block size: 1179649 [ 1039.347733][T31710] loop3: detected capacity change from 0 to 512 [ 1039.354749][T31710] EXT4-fs (loop3): bad geometry: first data block 1245184 is beyond end of filesystem (128) 17:31:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100200001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000018000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1201}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8847000000000000}, 0x0) [ 1039.653922][T31722] loop3: detected capacity change from 0 to 512 [ 1039.662558][T31722] EXT4-fs (loop3): bad geometry: first data block 1572864 is beyond end of filesystem (128) [ 1039.675903][T31724] loop2: detected capacity change from 0 to 512 [ 1039.684879][T31724] EXT4-fs (loop2): Invalid log block size: 2097153 [ 1039.692517][ C1] sd 0:0:1:0: tag#7265 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1039.702359][ C1] sd 0:0:1:0: tag#7265 CDB: opcode=0xe5 (vendor) [ 1039.708702][ C1] sd 0:0:1:0: tag#7265 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1039.717771][ C1] sd 0:0:1:0: tag#7265 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1039.726885][ C1] sd 0:0:1:0: tag#7265 CDB[20]: ba 17:31:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000110200001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1039.797506][T31722] loop3: detected capacity change from 0 to 512 [ 1039.803094][T31724] loop2: detected capacity change from 0 to 512 [ 1039.810277][T31722] EXT4-fs (loop3): bad geometry: first data block 1572864 is beyond end of filesystem (128) [ 1039.820949][T31724] EXT4-fs (loop2): Invalid log block size: 2097153 17:31:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000020000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1039.891044][T31729] loop2: detected capacity change from 0 to 512 [ 1039.917534][T31729] EXT4-fs (loop2): Invalid log block size: 2101249 [ 1039.932768][T31733] loop3: detected capacity change from 0 to 512 [ 1039.972637][T31729] loop2: detected capacity change from 0 to 512 [ 1039.981006][T31733] EXT4-fs (loop3): bad geometry: first data block 2097152 is beyond end of filesystem (128) 17:31:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x1, 0x0, 0x0, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1203}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1040.016789][T31729] EXT4-fs (loop2): Invalid log block size: 2101249 [ 1040.064558][ C0] sd 0:0:1:0: tag#7266 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1040.074597][ C0] sd 0:0:1:0: tag#7266 CDB: opcode=0xe5 (vendor) [ 1040.080955][ C0] sd 0:0:1:0: tag#7266 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1040.090001][ C0] sd 0:0:1:0: tag#7266 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1040.099057][ C0] sd 0:0:1:0: tag#7266 CDB[20]: ba 17:31:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100220001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1040.143820][T31733] loop3: detected capacity change from 0 to 512 [ 1040.173186][T31733] EXT4-fs (loop3): bad geometry: first data block 2097152 is beyond end of filesystem (128) 17:31:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x8848000000000000}, 0x0) [ 1040.205451][T31741] loop2: detected capacity change from 0 to 512 [ 1040.217129][T31741] EXT4-fs (loop2): Invalid log block size: 2228225 17:31:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000001020000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1040.278579][T31741] loop2: detected capacity change from 0 to 512 [ 1040.286124][T31741] EXT4-fs (loop2): Invalid log block size: 2228225 [ 1040.292992][T31746] loop3: detected capacity change from 0 to 512 [ 1040.301241][T31746] EXT4-fs (loop3): bad geometry: first data block 2101248 is beyond end of filesystem (128) [ 1040.360659][T31746] loop3: detected capacity change from 0 to 512 [ 1040.380736][T31746] EXT4-fs (loop3): bad geometry: first data block 2101248 is beyond end of filesystem (128) 17:31:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100250001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000022000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1402}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) [ 1040.582092][T31753] loop3: detected capacity change from 0 to 512 [ 1040.607464][T31758] loop2: detected capacity change from 0 to 512 [ 1040.609610][ C0] sd 0:0:1:0: tag#7267 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1040.623563][ C0] sd 0:0:1:0: tag#7267 CDB: opcode=0xe5 (vendor) [ 1040.629906][ C0] sd 0:0:1:0: tag#7267 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1040.639044][ C0] sd 0:0:1:0: tag#7267 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1040.648077][ C0] sd 0:0:1:0: tag#7267 CDB[20]: ba [ 1040.669373][T31758] EXT4-fs (loop2): Invalid log block size: 2424833 [ 1040.677297][T31753] EXT4-fs (loop3): bad geometry: first data block 2228224 is beyond end of filesystem (128) [ 1040.753573][T31758] loop2: detected capacity change from 0 to 512 [ 1040.760773][T31753] loop3: detected capacity change from 0 to 512 [ 1040.769324][T31753] EXT4-fs (loop3): bad geometry: first data block 2228224 is beyond end of filesystem (128) [ 1040.779712][T31758] EXT4-fs (loop2): Invalid log block size: 2424833 17:31:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001002e0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000025000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1040.859140][T31766] loop2: detected capacity change from 0 to 512 [ 1040.867765][T31768] loop3: detected capacity change from 0 to 512 [ 1040.875277][T31766] EXT4-fs (loop2): Invalid log block size: 3014657 17:31:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x4, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1040.908259][T31768] EXT4-fs (loop3): bad geometry: first data block 2424832 is beyond end of filesystem (128) [ 1040.939869][ C0] sd 0:0:1:0: tag#7268 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1040.949751][ C0] sd 0:0:1:0: tag#7268 CDB: opcode=0xe5 (vendor) [ 1040.956116][ C0] sd 0:0:1:0: tag#7268 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1040.965162][ C0] sd 0:0:1:0: tag#7268 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1040.974229][ C0] sd 0:0:1:0: tag#7268 CDB[20]: ba 17:31:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1602}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9c03000000000000}, 0x0) [ 1041.016223][T31766] loop2: detected capacity change from 0 to 512 [ 1041.027707][T31768] loop3: detected capacity change from 0 to 512 [ 1041.029360][T31766] EXT4-fs (loop2): Invalid log block size: 3014657 [ 1041.043118][T31768] EXT4-fs (loop3): bad geometry: first data block 2424832 is beyond end of filesystem (128) 17:31:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001003f0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000022c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1041.153329][T31777] loop2: detected capacity change from 0 to 512 [ 1041.184635][T31777] EXT4-fs (loop2): Invalid log block size: 4128769 [ 1041.186293][T31780] loop3: detected capacity change from 0 to 512 [ 1041.204122][T31780] EXT4-fs (loop3): bad geometry: first data block 2884096 is beyond end of filesystem (128) [ 1041.237875][T31780] loop3: detected capacity change from 0 to 512 [ 1041.238663][T31777] loop2: detected capacity change from 0 to 512 [ 1041.251453][T31780] EXT4-fs (loop3): bad geometry: first data block 2884096 is beyond end of filesystem (128) [ 1041.252510][T31777] EXT4-fs (loop2): Invalid log block size: 4128769 17:31:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000140)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000002e000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100400001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1603}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1041.472973][T31788] loop3: detected capacity change from 0 to 512 [ 1041.473826][T31792] loop2: detected capacity change from 0 to 512 [ 1041.506769][ C1] sd 0:0:1:0: tag#7269 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:31:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1041.508019][T31788] EXT4-fs (loop3): bad geometry: first data block 3014656 is beyond end of filesystem (128) [ 1041.516627][ C1] sd 0:0:1:0: tag#7269 CDB: opcode=0xe5 (vendor) [ 1041.532991][ C1] sd 0:0:1:0: tag#7269 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1041.542027][ C1] sd 0:0:1:0: tag#7269 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1041.551070][ C1] sd 0:0:1:0: tag#7269 CDB[20]: ba [ 1041.607328][T31792] EXT4-fs (loop2): Invalid log block size: 4194305 [ 1041.633806][T31788] loop3: detected capacity change from 0 to 512 17:31:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100480001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1041.673073][T31792] loop2: detected capacity change from 0 to 512 [ 1041.673281][T31788] EXT4-fs (loop3): bad geometry: first data block 3014656 is beyond end of filesystem (128) [ 1041.694594][T31792] EXT4-fs (loop2): Invalid log block size: 4194305 17:31:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000022e000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1041.753908][T31801] loop2: detected capacity change from 0 to 512 [ 1041.768970][T31803] loop3: detected capacity change from 0 to 512 [ 1041.776114][T31801] EXT4-fs (loop2): Invalid log block size: 4718593 [ 1041.810272][T31803] EXT4-fs (loop3): bad geometry: first data block 3015168 is beyond end of filesystem (128) [ 1041.820455][ C0] sd 0:0:1:0: tag#7270 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1041.830299][ C0] sd 0:0:1:0: tag#7270 CDB: opcode=0xe5 (vendor) [ 1041.836634][ C0] sd 0:0:1:0: tag#7270 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1041.845684][ C0] sd 0:0:1:0: tag#7270 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1041.854732][ C0] sd 0:0:1:0: tag#7270 CDB[20]: ba 17:31:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1e02}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1041.878862][T31801] loop2: detected capacity change from 0 to 512 [ 1041.888529][T31803] loop3: detected capacity change from 0 to 512 [ 1041.890394][T31801] EXT4-fs (loop2): Invalid log block size: 4718593 [ 1041.903796][T31803] EXT4-fs (loop3): bad geometry: first data block 3015168 is beyond end of filesystem (128) 17:31:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x9f05000000000000}, 0x0) 17:31:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001004c0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000230000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1042.035231][T31813] loop2: detected capacity change from 0 to 512 [ 1042.050551][T31816] loop3: detected capacity change from 0 to 512 [ 1042.058192][T31813] EXT4-fs (loop2): Invalid log block size: 4980737 [ 1042.079007][T31816] EXT4-fs (loop3): bad geometry: first data block 3146240 is beyond end of filesystem (128) [ 1042.109148][T31813] loop2: detected capacity change from 0 to 512 [ 1042.117379][T31813] EXT4-fs (loop2): Invalid log block size: 4980737 [ 1042.147273][T31816] loop3: detected capacity change from 0 to 512 [ 1042.154121][T31816] EXT4-fs (loop3): bad geometry: first data block 3146240 is beyond end of filesystem (128) 17:31:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100600001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000032000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2000}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc3ffffff00000000}, 0x0) [ 1042.355599][T31823] loop3: detected capacity change from 0 to 512 [ 1042.362278][T31827] loop2: detected capacity change from 0 to 512 [ 1042.380127][T31827] EXT4-fs (loop2): Invalid log block size: 6291457 [ 1042.388442][T31823] EXT4-fs (loop3): bad geometry: first data block 3276800 is beyond end of filesystem (128) [ 1042.404654][ C0] sd 0:0:1:0: tag#7275 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1042.414500][ C0] sd 0:0:1:0: tag#7275 CDB: opcode=0xe5 (vendor) [ 1042.420935][ C0] sd 0:0:1:0: tag#7275 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1042.430056][ C0] sd 0:0:1:0: tag#7275 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1042.439133][ C0] sd 0:0:1:0: tag#7275 CDB[20]: ba [ 1042.499841][T31823] loop3: detected capacity change from 0 to 512 [ 1042.516608][T31827] loop2: detected capacity change from 0 to 512 [ 1042.523536][T31827] EXT4-fs (loop2): Invalid log block size: 6291457 [ 1042.531148][T31823] EXT4-fs (loop3): bad geometry: first data block 3276800 is beyond end of filesystem (128) 17:31:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100680001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000003f000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1042.596274][T31830] __nla_validate_parse: 34 callbacks suppressed [ 1042.596286][T31830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1042.615855][T31833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1042.654675][T31837] loop3: detected capacity change from 0 to 512 [ 1042.663393][T31838] loop2: detected capacity change from 0 to 512 [ 1042.681422][T31837] EXT4-fs (loop3): bad geometry: first data block 4128768 is beyond end of filesystem (128) [ 1042.692716][T31838] EXT4-fs (loop2): Invalid log block size: 6815745 17:31:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc405000000000000}, 0x0) 17:31:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2003}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1042.738103][T31838] loop2: detected capacity change from 0 to 512 [ 1042.745602][T31837] loop3: detected capacity change from 0 to 512 [ 1042.755375][T31838] EXT4-fs (loop2): Invalid log block size: 6815745 [ 1042.763358][T31837] EXT4-fs (loop3): bad geometry: first data block 4128768 is beyond end of filesystem (128) [ 1042.769073][T31843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000040000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001006c0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1042.848822][T31845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1042.894730][T31850] loop2: detected capacity change from 0 to 512 [ 1042.903748][T31851] loop3: detected capacity change from 0 to 512 [ 1042.921789][T31850] EXT4-fs (loop2): Invalid log block size: 7077889 [ 1042.928748][T31851] EXT4-fs (loop3): bad geometry: first data block 4194304 is beyond end of filesystem (128) [ 1042.977587][T31850] loop2: detected capacity change from 0 to 512 [ 1042.987580][T31850] EXT4-fs (loop2): Invalid log block size: 7077889 [ 1042.998541][T31851] loop3: detected capacity change from 0 to 512 [ 1043.005235][T31851] EXT4-fs (loop3): bad geometry: first data block 4194304 is beyond end of filesystem (128) [ 1043.071646][T31843] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1043.085580][T31845] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r7, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000346000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100720001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2100}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xc505000000000000}, 0x0) [ 1043.252517][T31861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1043.255351][T31863] loop3: detected capacity change from 0 to 512 [ 1043.262282][T31862] loop2: detected capacity change from 0 to 512 [ 1043.274515][T31863] EXT4-fs (loop3): bad geometry: first data block 4588288 is beyond end of filesystem (128) [ 1043.289721][T31862] EXT4-fs (loop2): Invalid log block size: 7471105 [ 1043.299146][ C0] scsi_io_completion_action: 1 callbacks suppressed [ 1043.299176][ C0] sd 0:0:1:0: tag#7277 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1043.315602][ C0] sd 0:0:1:0: tag#7277 CDB: opcode=0xe5 (vendor) [ 1043.321972][ C0] sd 0:0:1:0: tag#7277 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1043.331011][ C0] sd 0:0:1:0: tag#7277 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1043.340056][ C0] sd 0:0:1:0: tag#7277 CDB[20]: ba [ 1043.392504][T31864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1043.404381][T31863] loop3: detected capacity change from 0 to 512 [ 1043.415355][T31862] loop2: detected capacity change from 0 to 512 [ 1043.423055][T31862] EXT4-fs (loop2): Invalid log block size: 7471105 [ 1043.434554][T31863] EXT4-fs (loop3): bad geometry: first data block 4588288 is beyond end of filesystem (128) 17:31:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100730001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000048000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1043.506253][T31866] device veth4294 entered promiscuous mode [ 1043.514515][T31869] loop2: detected capacity change from 0 to 512 [ 1043.531522][T31869] EXT4-fs (loop2): Invalid log block size: 7536641 [ 1043.538430][T31871] loop3: detected capacity change from 0 to 512 [ 1043.556089][T31866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1043.566376][ C1] sd 0:0:1:0: tag#7278 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1043.576247][ C1] sd 0:0:1:0: tag#7278 CDB: opcode=0xe5 (vendor) [ 1043.582590][ C1] sd 0:0:1:0: tag#7278 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1043.591651][ C1] sd 0:0:1:0: tag#7278 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1043.600689][ C1] sd 0:0:1:0: tag#7278 CDB[20]: ba [ 1043.607779][T31871] EXT4-fs (loop3): bad geometry: first data block 4718592 is beyond end of filesystem (128) [ 1043.626558][T31869] loop2: detected capacity change from 0 to 512 [ 1043.635586][T31869] EXT4-fs (loop2): Invalid log block size: 7536641 [ 1043.643433][T31861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100740001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2211}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1043.646187][T31871] loop3: detected capacity change from 0 to 512 [ 1043.659668][T31871] EXT4-fs (loop3): bad geometry: first data block 4718592 is beyond end of filesystem (128) [ 1043.697869][T31877] loop2: detected capacity change from 0 to 512 17:31:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000148000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xce0c000000000000}, 0x0) [ 1043.707999][T31877] EXT4-fs (loop2): Invalid log block size: 7602177 [ 1043.755106][T31881] loop3: detected capacity change from 0 to 512 [ 1043.762806][T31881] EXT4-fs (loop3): bad geometry: first data block 4718848 is beyond end of filesystem (128) [ 1043.789220][T31877] loop2: detected capacity change from 0 to 512 [ 1043.797678][T31877] EXT4-fs (loop2): Invalid log block size: 7602177 [ 1043.837362][T31881] loop3: detected capacity change from 0 to 512 [ 1043.845169][T31881] EXT4-fs (loop3): bad geometry: first data block 4718848 is beyond end of filesystem (128) 17:31:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100750001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000004c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2603}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xd001000000000000}, 0x0) [ 1044.136180][T31899] loop2: detected capacity change from 0 to 512 [ 1044.144511][T31899] EXT4-fs (loop2): Invalid log block size: 7667713 [ 1044.151783][T31898] loop3: detected capacity change from 0 to 512 [ 1044.167251][ C1] sd 0:0:1:0: tag#7279 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.177090][ C1] sd 0:0:1:0: tag#7279 CDB: opcode=0xe5 (vendor) [ 1044.183441][ C1] sd 0:0:1:0: tag#7279 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1044.192485][ C1] sd 0:0:1:0: tag#7279 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1044.201526][ C1] sd 0:0:1:0: tag#7279 CDB[20]: ba [ 1044.228184][T31899] loop2: detected capacity change from 0 to 512 [ 1044.234516][T31898] EXT4-fs (loop3): bad geometry: first data block 4980736 is beyond end of filesystem (128) [ 1044.245338][T31899] EXT4-fs (loop2): Invalid log block size: 7667713 17:31:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001007a0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1044.277655][T31898] loop3: detected capacity change from 0 to 512 [ 1044.284687][T31898] EXT4-fs (loop3): bad geometry: first data block 4980736 is beyond end of filesystem (128) 17:31:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000014f000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1044.338834][T31904] loop2: detected capacity change from 0 to 512 [ 1044.354375][T31904] EXT4-fs (loop2): Invalid log block size: 7995393 [ 1044.377705][T31907] loop3: detected capacity change from 0 to 512 17:31:18 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1044.396514][T31907] EXT4-fs (loop3): bad geometry: first data block 5177600 is beyond end of filesystem (128) [ 1044.428547][T31904] loop2: detected capacity change from 0 to 512 [ 1044.441500][T31904] EXT4-fs (loop2): Invalid log block size: 7995393 [ 1044.449693][T31907] loop3: detected capacity change from 0 to 512 [ 1044.458205][ C0] sd 0:0:1:0: tag#7280 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1044.468062][ C0] sd 0:0:1:0: tag#7280 CDB: opcode=0xe5 (vendor) [ 1044.474474][ C0] sd 0:0:1:0: tag#7280 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1044.483529][ C0] sd 0:0:1:0: tag#7280 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:31:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2a03}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1044.492582][ C0] sd 0:0:1:0: tag#7280 CDB[20]: ba [ 1044.517253][T31907] EXT4-fs (loop3): bad geometry: first data block 5177600 is beyond end of filesystem (128) 17:31:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001007f0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000152000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xe200000000000000}, 0x0) [ 1044.601641][T31915] loop2: detected capacity change from 0 to 512 [ 1044.613129][T31917] loop3: detected capacity change from 0 to 512 [ 1044.620858][T31915] EXT4-fs (loop2): Invalid log block size: 8323073 [ 1044.650318][T31917] EXT4-fs (loop3): bad geometry: first data block 5374208 is beyond end of filesystem (128) [ 1044.677838][T31915] loop2: detected capacity change from 0 to 512 [ 1044.684565][T31915] EXT4-fs (loop2): Invalid log block size: 8323073 [ 1044.697282][T31917] loop3: detected capacity change from 0 to 512 [ 1044.704991][T31917] EXT4-fs (loop3): bad geometry: first data block 5374208 is beyond end of filesystem (128) 17:31:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001059f0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000153000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3000}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xeaffffff00000000}, 0x0) [ 1045.025385][T31926] loop2: detected capacity change from 0 to 512 [ 1045.045299][T31926] EXT4-fs (loop2): Invalid log block size: 10421505 [ 1045.046816][T31929] loop3: detected capacity change from 0 to 512 [ 1045.056747][ C1] sd 0:0:1:0: tag#7281 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1045.067990][ C1] sd 0:0:1:0: tag#7281 CDB: opcode=0xe5 (vendor) [ 1045.074324][ C1] sd 0:0:1:0: tag#7281 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1045.083488][ C1] sd 0:0:1:0: tag#7281 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1045.092548][ C1] sd 0:0:1:0: tag#7281 CDB[20]: ba [ 1045.097803][T31929] EXT4-fs (loop3): bad geometry: first data block 5439744 is beyond end of filesystem (128) [ 1045.198391][T31926] loop2: detected capacity change from 0 to 512 [ 1045.206004][T31929] loop3: detected capacity change from 0 to 512 [ 1045.215159][T31926] EXT4-fs (loop2): Invalid log block size: 10421505 17:31:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000105c50001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1045.249079][T31929] EXT4-fs (loop3): bad geometry: first data block 5439744 is beyond end of filesystem (128) 17:31:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1045.316207][T31939] loop2: detected capacity change from 0 to 512 [ 1045.337758][ C0] sd 0:0:1:0: tag#7282 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1045.347632][ C0] sd 0:0:1:0: tag#7282 CDB: opcode=0xe5 (vendor) [ 1045.354239][ C0] sd 0:0:1:0: tag#7282 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:31:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000154000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1045.362227][T31939] EXT4-fs (loop2): Invalid log block size: 12911873 [ 1045.363289][ C0] sd 0:0:1:0: tag#7282 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1045.363305][ C0] sd 0:0:1:0: tag#7282 CDB[20]: ba 17:31:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3202}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xefffffff00000000}, 0x0) [ 1045.429706][T31939] loop2: detected capacity change from 0 to 512 [ 1045.436291][T31943] loop3: detected capacity change from 0 to 512 [ 1045.444506][T31939] EXT4-fs (loop2): Invalid log block size: 12911873 [ 1045.456223][T31943] EXT4-fs (loop3): bad geometry: first data block 5505280 is beyond end of filesystem (128) 17:31:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000103fb0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1045.547536][T31943] loop3: detected capacity change from 0 to 512 [ 1045.558540][T31943] EXT4-fs (loop3): bad geometry: first data block 5505280 is beyond end of filesystem (128) 17:31:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000015e000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1045.649669][T31952] loop2: detected capacity change from 0 to 512 [ 1045.656423][T31954] loop3: detected capacity change from 0 to 512 [ 1045.662241][T31952] EXT4-fs (loop2): Invalid log block size: 16450305 [ 1045.671110][T31954] EXT4-fs (loop3): bad geometry: first data block 6160640 is beyond end of filesystem (128) [ 1045.718202][T31952] loop2: detected capacity change from 0 to 512 [ 1045.724255][T31954] loop3: detected capacity change from 0 to 512 [ 1045.727492][T31952] EXT4-fs (loop2): Invalid log block size: 16450305 [ 1045.747855][T31954] EXT4-fs (loop3): bad geometry: first data block 6160640 is beyond end of filesystem (128) 17:31:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000101fc0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000015f000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3603}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) [ 1045.941310][T31959] loop3: detected capacity change from 0 to 512 [ 1045.953925][T31959] EXT4-fs (loop3): bad geometry: first data block 6226176 is beyond end of filesystem (128) [ 1045.961825][T31963] loop2: detected capacity change from 0 to 512 [ 1045.972228][T31963] EXT4-fs (loop2): Invalid log block size: 16515329 [ 1045.986695][ C1] sd 0:0:1:0: tag#7283 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1045.996558][ C1] sd 0:0:1:0: tag#7283 CDB: opcode=0xe5 (vendor) [ 1046.002892][ C1] sd 0:0:1:0: tag#7283 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1046.011950][ C1] sd 0:0:1:0: tag#7283 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1046.020986][ C1] sd 0:0:1:0: tag#7283 CDB[20]: ba 17:31:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000060000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1046.111736][T31959] loop3: detected capacity change from 0 to 512 [ 1046.121433][T31959] EXT4-fs (loop3): bad geometry: first data block 6226176 is beyond end of filesystem (128) [ 1046.121524][T31963] loop2: detected capacity change from 0 to 512 [ 1046.142523][T31963] EXT4-fs (loop2): Invalid log block size: 16515329 17:31:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001fffe0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1046.217230][T31972] loop2: detected capacity change from 0 to 512 [ 1046.223366][T31975] loop3: detected capacity change from 0 to 512 [ 1046.230822][ C0] sd 0:0:1:0: tag#7284 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1046.240650][ C0] sd 0:0:1:0: tag#7284 CDB: opcode=0xe5 (vendor) [ 1046.246991][ C0] sd 0:0:1:0: tag#7284 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1046.256030][ C0] sd 0:0:1:0: tag#7284 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1046.265042][ C0] sd 0:0:1:0: tag#7284 CDB[20]: ba [ 1046.290930][T31972] EXT4-fs (loop2): Invalid log block size: 16711425 [ 1046.297729][T31975] EXT4-fs (loop3): bad geometry: first data block 6291456 is beyond end of filesystem (128) 17:31:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3c02}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) [ 1046.332512][T31972] loop2: detected capacity change from 0 to 512 [ 1046.341883][T31975] loop3: detected capacity change from 0 to 512 [ 1046.348570][T31972] EXT4-fs (loop2): Invalid log block size: 16711425 [ 1046.360839][T31975] EXT4-fs (loop3): bad geometry: first data block 6291456 is beyond end of filesystem (128) 17:31:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000068000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010fff0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1046.483152][T31986] loop3: detected capacity change from 0 to 512 [ 1046.508586][T31988] loop2: detected capacity change from 0 to 512 [ 1046.519336][T31986] EXT4-fs (loop3): bad geometry: first data block 6815744 is beyond end of filesystem (128) [ 1046.520558][T31988] EXT4-fs (loop2): Invalid log block size: 16715521 [ 1046.567790][T31986] loop3: detected capacity change from 0 to 512 [ 1046.578143][T31986] EXT4-fs (loop3): bad geometry: first data block 6815744 is beyond end of filesystem (128) [ 1046.600201][T31988] loop2: detected capacity change from 0 to 512 [ 1046.612126][T31988] EXT4-fs (loop2): Invalid log block size: 16715521 17:31:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000006c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfdffffff00000000}, 0x0) 17:31:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001feff0001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3e03}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1046.875843][T31998] loop2: detected capacity change from 0 to 512 [ 1046.883952][T31999] loop3: detected capacity change from 0 to 512 [ 1046.895404][T31998] EXT4-fs (loop2): Invalid log block size: 16776705 [ 1046.902342][T31999] EXT4-fs (loop3): bad geometry: first data block 7077888 is beyond end of filesystem (128) [ 1046.922219][ C0] sd 0:0:1:0: tag#7285 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1046.932074][ C0] sd 0:0:1:0: tag#7285 CDB: opcode=0xe5 (vendor) [ 1046.938426][ C0] sd 0:0:1:0: tag#7285 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1046.947462][ C0] sd 0:0:1:0: tag#7285 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1046.956493][ C0] sd 0:0:1:0: tag#7285 CDB[20]: ba [ 1046.964487][T31998] loop2: detected capacity change from 0 to 512 [ 1046.975674][T31998] EXT4-fs (loop2): Invalid log block size: 16776705 [ 1047.010175][T31999] loop3: detected capacity change from 0 to 512 [ 1047.018209][T31999] EXT4-fs (loop3): bad geometry: first data block 7077888 is beyond end of filesystem (128) 17:31:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x0, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000002000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1047.103756][T32008] loop2: detected capacity change from 0 to 512 [ 1047.106078][ C1] sd 0:0:1:0: tag#7290 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1047.119921][ C1] sd 0:0:1:0: tag#7290 CDB: opcode=0xe5 (vendor) [ 1047.126275][ C1] sd 0:0:1:0: tag#7290 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1047.128831][T32008] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 1047.135300][ C1] sd 0:0:1:0: tag#7290 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:31:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000026e000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1047.152581][ C1] sd 0:0:1:0: tag#7290 CDB[20]: ba [ 1047.172248][T32012] loop3: detected capacity change from 0 to 512 [ 1047.183268][T32012] EXT4-fs (loop3): bad geometry: first data block 7209472 is beyond end of filesystem (128) [ 1047.209175][T32008] loop2: detected capacity change from 0 to 512 [ 1047.225315][T32008] EXT4-fs (loop2): fragment/cluster size (4096) != block size (2048) [ 1047.234885][T32012] loop3: detected capacity change from 0 to 512 [ 1047.262278][T32012] EXT4-fs (loop3): bad geometry: first data block 7209472 is beyond end of filesystem (128) 17:31:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000003000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000026f000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) [ 1047.338903][T32015] loop2: detected capacity change from 0 to 512 [ 1047.370571][T32015] EXT4-fs (loop2): fragment/cluster size (8192) != block size (2048) [ 1047.383854][T32019] loop3: detected capacity change from 0 to 512 [ 1047.400182][T32019] EXT4-fs (loop3): bad geometry: first data block 7275008 is beyond end of filesystem (128) 17:31:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3f00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1047.434347][T32015] loop2: detected capacity change from 0 to 512 [ 1047.474521][T32015] EXT4-fs (loop2): fragment/cluster size (8192) != block size (2048) [ 1047.503426][T32019] loop3: detected capacity change from 0 to 512 [ 1047.510453][T32019] EXT4-fs (loop3): bad geometry: first data block 7275008 is beyond end of filesystem (128) [ 1047.663092][T32023] device veth4321 entered promiscuous mode [ 1047.670709][T32017] __nla_validate_parse: 34 callbacks suppressed [ 1047.670724][T32017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1047.721503][T32022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000004000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000272000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffff030000000000}, 0x0) 17:31:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4000}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1047.799945][T32028] loop3: detected capacity change from 0 to 512 [ 1047.808473][T32030] loop2: detected capacity change from 0 to 512 [ 1047.823365][T32028] EXT4-fs (loop3): bad geometry: first data block 7471616 is beyond end of filesystem (128) [ 1047.824840][T32036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1047.844423][T32030] EXT4-fs (loop2): fragment/cluster size (16384) != block size (2048) [ 1047.918163][T32032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1047.936616][T32030] loop2: detected capacity change from 0 to 512 17:31:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x0, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1047.968253][T32028] loop3: detected capacity change from 0 to 512 [ 1047.975044][T32030] EXT4-fs (loop2): fragment/cluster size (16384) != block size (2048) [ 1048.007564][T32028] EXT4-fs (loop3): bad geometry: first data block 7471616 is beyond end of filesystem (128) 17:31:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000005000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000273000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1048.079570][T32043] loop2: detected capacity change from 0 to 512 [ 1048.089422][T32043] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048) [ 1048.098030][T32045] loop3: detected capacity change from 0 to 512 [ 1048.105323][T32045] EXT4-fs (loop3): bad geometry: first data block 7537152 is beyond end of filesystem (128) [ 1048.123583][T32036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1048.134888][T32043] loop2: detected capacity change from 0 to 512 [ 1048.143181][T32032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.153079][T32043] EXT4-fs (loop2): fragment/cluster size (32768) != block size (2048) [ 1048.164338][T32045] loop3: detected capacity change from 0 to 512 17:31:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000006000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1048.175338][T32045] EXT4-fs (loop3): bad geometry: first data block 7537152 is beyond end of filesystem (128) 17:31:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4002}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000074000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1048.250949][T32048] loop2: detected capacity change from 0 to 512 [ 1048.288666][T32048] EXT4-fs (loop2): fragment/cluster size (65536) != block size (2048) 17:31:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 1048.307358][T32052] loop3: detected capacity change from 0 to 512 [ 1048.313720][T32050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.335452][T32052] EXT4-fs (loop3): bad geometry: first data block 7602176 is beyond end of filesystem (128) [ 1048.373644][T32048] loop2: detected capacity change from 0 to 512 [ 1048.380429][T32048] EXT4-fs (loop2): fragment/cluster size (65536) != block size (2048) [ 1048.415528][T32052] loop3: detected capacity change from 0 to 512 [ 1048.423364][T32052] EXT4-fs (loop3): bad geometry: first data block 7602176 is beyond end of filesystem (128) [ 1048.434115][T32054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1048.599019][T32050] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1048.667402][T32054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000007000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000076000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4402}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 1048.737315][T32062] loop2: detected capacity change from 0 to 512 [ 1048.743798][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1048.743836][ C0] sd 0:0:1:0: tag#7293 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1048.746866][T32064] loop3: detected capacity change from 0 to 512 [ 1048.750482][ C0] sd 0:0:1:0: tag#7293 CDB: opcode=0xe5 (vendor) [ 1048.772789][ C0] sd 0:0:1:0: tag#7293 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1048.781840][ C0] sd 0:0:1:0: tag#7293 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1048.790909][ C0] sd 0:0:1:0: tag#7293 CDB[20]: ba [ 1048.791035][T32062] EXT4-fs (loop2): fragment/cluster size (131072) != block size (2048) [ 1048.807535][T32064] EXT4-fs (loop3): bad geometry: first data block 7733248 is beyond end of filesystem (128) 17:31:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x0, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1048.872801][T32064] loop3: detected capacity change from 0 to 512 [ 1048.883171][T32062] loop2: detected capacity change from 0 to 512 [ 1048.898596][ C1] sd 0:0:1:0: tag#7294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1048.908445][ C1] sd 0:0:1:0: tag#7294 CDB: opcode=0xe5 (vendor) [ 1048.914770][ C1] sd 0:0:1:0: tag#7294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1048.923804][ C1] sd 0:0:1:0: tag#7294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1048.923888][T32062] EXT4-fs (loop2): fragment/cluster size (131072) != block size (2048) [ 1048.932864][ C1] sd 0:0:1:0: tag#7294 CDB[20]: ba [ 1048.941628][T32064] EXT4-fs (loop3): bad geometry: first data block 7733248 is beyond end of filesystem (128) 17:31:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000276000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000008000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1049.036466][T32079] loop3: detected capacity change from 0 to 512 [ 1049.048525][T32079] EXT4-fs (loop3): bad geometry: first data block 7733760 is beyond end of filesystem (128) [ 1049.059037][T32081] loop2: detected capacity change from 0 to 512 [ 1049.067755][T32081] EXT4-fs (loop2): fragment/cluster size (262144) != block size (2048) [ 1049.136062][T32081] loop2: detected capacity change from 0 to 512 [ 1049.142971][T32079] loop3: detected capacity change from 0 to 512 [ 1049.149554][T32081] EXT4-fs (loop2): fragment/cluster size (262144) != block size (2048) [ 1049.159147][T32079] EXT4-fs (loop3): bad geometry: first data block 7733760 is beyond end of filesystem (128) 17:31:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100001808000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4788}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000277000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1049.243090][T32088] loop2: detected capacity change from 0 to 512 [ 1049.274883][T32088] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1049.277104][T32093] loop3: detected capacity change from 0 to 512 [ 1049.289152][T32093] EXT4-fs (loop3): bad geometry: first data block 7799296 is beyond end of filesystem (128) [ 1049.338486][T32093] loop3: detected capacity change from 0 to 512 [ 1049.340964][T32088] loop2: detected capacity change from 0 to 512 [ 1049.351286][T32093] EXT4-fs (loop3): bad geometry: first data block 7799296 is beyond end of filesystem (128) [ 1049.353534][T32088] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1049.551385][T32094] device veth4333 entered promiscuous mode 17:31:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000007a000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000009000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1049.623047][T32098] loop3: detected capacity change from 0 to 512 [ 1049.624512][T32099] loop2: detected capacity change from 0 to 512 [ 1049.657425][ C1] sd 0:0:1:0: tag#7295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:31:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1049.657466][T32099] EXT4-fs (loop2): fragment/cluster size (524288) != block size (2048) [ 1049.667291][ C1] sd 0:0:1:0: tag#7295 CDB: opcode=0xe5 (vendor) [ 1049.681834][ C1] sd 0:0:1:0: tag#7295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1049.690952][ C1] sd 0:0:1:0: tag#7295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1049.700042][ C1] sd 0:0:1:0: tag#7295 CDB[20]: ba [ 1049.705215][T32098] EXT4-fs (loop3): bad geometry: first data block 7995392 is beyond end of filesystem (128) 17:31:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x0, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4800}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1049.779685][T32099] loop2: detected capacity change from 0 to 512 [ 1049.780019][T32098] loop3: detected capacity change from 0 to 512 [ 1049.792313][T32099] EXT4-fs (loop2): fragment/cluster size (524288) != block size (2048) [ 1049.803274][T32098] EXT4-fs (loop3): bad geometry: first data block 7995392 is beyond end of filesystem (128) 17:31:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000a000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffffff85000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1049.842154][ C1] sd 0:0:1:0: tag#7232 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1049.852023][ C1] sd 0:0:1:0: tag#7232 CDB: opcode=0xe5 (vendor) [ 1049.858459][ C1] sd 0:0:1:0: tag#7232 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1049.867503][ C1] sd 0:0:1:0: tag#7232 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1049.876542][ C1] sd 0:0:1:0: tag#7232 CDB[20]: ba [ 1049.961278][T32113] loop2: detected capacity change from 0 to 512 [ 1049.962400][T32114] loop3: detected capacity change from 0 to 512 [ 1049.999253][T32114] EXT4-fs (loop3): bad geometry: first data block 8781823 is beyond end of filesystem (128) [ 1050.010810][T32113] EXT4-fs (loop2): fragment/cluster size (1048576) != block size (2048) [ 1050.077900][T32113] loop2: detected capacity change from 0 to 512 [ 1050.084685][T32114] loop3: detected capacity change from 0 to 512 [ 1050.091681][T32114] EXT4-fs (loop3): bad geometry: first data block 8781823 is beyond end of filesystem (128) [ 1050.112896][T32113] EXT4-fs (loop2): fragment/cluster size (1048576) != block size (2048) 17:31:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000188000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000b000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4801}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1050.218675][T32122] loop3: detected capacity change from 0 to 512 [ 1050.222745][T32121] loop2: detected capacity change from 0 to 512 [ 1050.237210][T32121] EXT4-fs (loop2): fragment/cluster size (2097152) != block size (2048) [ 1050.239239][T32122] EXT4-fs (loop3): bad geometry: first data block 8913152 is beyond end of filesystem (128) [ 1050.309167][T32122] loop3: detected capacity change from 0 to 512 [ 1050.322442][T32122] EXT4-fs (loop3): bad geometry: first data block 8913152 is beyond end of filesystem (128) [ 1050.336736][T32121] loop2: detected capacity change from 0 to 512 17:31:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 1050.361192][T32121] EXT4-fs (loop2): fragment/cluster size (2097152) != block size (2048) 17:31:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000189000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000180b000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1050.549781][T32133] loop2: detected capacity change from 0 to 512 [ 1050.556409][T32134] loop3: detected capacity change from 0 to 512 [ 1050.569733][T32133] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1050.581834][T32134] EXT4-fs (loop3): bad geometry: first data block 8978688 is beyond end of filesystem (128) [ 1050.596567][ C0] sd 0:0:1:0: tag#7233 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1050.606430][ C0] sd 0:0:1:0: tag#7233 CDB: opcode=0xe5 (vendor) [ 1050.612760][ C0] sd 0:0:1:0: tag#7233 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1050.621807][ C0] sd 0:0:1:0: tag#7233 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1050.630971][ C0] sd 0:0:1:0: tag#7233 CDB[20]: ba 17:31:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x0, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1050.654781][T32133] loop2: detected capacity change from 0 to 512 [ 1050.661413][T32134] loop3: detected capacity change from 0 to 512 [ 1050.676015][T32133] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1050.683275][T32134] EXT4-fs (loop3): bad geometry: first data block 8978688 is beyond end of filesystem (128) [ 1050.715529][ C0] sd 0:0:1:0: tag#7234 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1050.725409][ C0] sd 0:0:1:0: tag#7234 CDB: opcode=0xe5 (vendor) [ 1050.731822][ C0] sd 0:0:1:0: tag#7234 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1050.740881][ C0] sd 0:0:1:0: tag#7234 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1050.749929][ C0] sd 0:0:1:0: tag#7234 CDB[20]: ba 17:31:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4888}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000c000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000018c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1050.865938][T32142] loop3: detected capacity change from 0 to 512 [ 1050.883458][T32144] loop2: detected capacity change from 0 to 512 [ 1050.899497][T32142] EXT4-fs (loop3): bad geometry: first data block 9175296 is beyond end of filesystem (128) [ 1050.922153][T32144] EXT4-fs (loop2): fragment/cluster size (4194304) != block size (2048) [ 1050.969632][T32144] loop2: detected capacity change from 0 to 512 [ 1050.970346][T32142] loop3: detected capacity change from 0 to 512 [ 1050.984284][T32144] EXT4-fs (loop2): fragment/cluster size (4194304) != block size (2048) [ 1050.993495][T32142] EXT4-fs (loop3): bad geometry: first data block 9175296 is beyond end of filesystem (128) 17:31:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000180c000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffffff8c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1051.104435][T32149] loop2: detected capacity change from 0 to 512 [ 1051.116304][T32151] loop3: detected capacity change from 0 to 512 [ 1051.121190][T32149] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1051.151676][T32151] EXT4-fs (loop3): bad geometry: first data block 9240575 is beyond end of filesystem (128) [ 1051.216953][T32149] loop2: detected capacity change from 0 to 512 [ 1051.218189][T32151] loop3: detected capacity change from 0 to 512 [ 1051.254309][T32151] EXT4-fs (loop3): bad geometry: first data block 9240575 is beyond end of filesystem (128) [ 1051.254371][T32149] EXT4-fs (loop2): Invalid log block size: 402653185 17:31:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4a00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000d000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.344165][T32161] loop2: detected capacity change from 0 to 512 [ 1051.352443][T32161] EXT4-fs (loop2): fragment/cluster size (8388608) != block size (2048) 17:31:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{}, r9, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000018d000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.415235][T32161] loop2: detected capacity change from 0 to 512 [ 1051.423632][T32161] EXT4-fs (loop2): fragment/cluster size (8388608) != block size (2048) [ 1051.455624][T32167] loop3: detected capacity change from 0 to 512 [ 1051.464176][T32167] EXT4-fs (loop3): bad geometry: first data block 9240832 is beyond end of filesystem (128) [ 1051.486149][ C0] sd 0:0:1:0: tag#7235 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1051.496014][ C0] sd 0:0:1:0: tag#7235 CDB: opcode=0xe5 (vendor) 17:31:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000180d000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.502346][ C0] sd 0:0:1:0: tag#7235 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1051.511385][ C0] sd 0:0:1:0: tag#7235 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1051.520434][ C0] sd 0:0:1:0: tag#7235 CDB[20]: ba [ 1051.543067][T32167] loop3: detected capacity change from 0 to 512 17:31:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x0, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1051.557030][T32167] EXT4-fs (loop3): bad geometry: first data block 9240832 is beyond end of filesystem (128) [ 1051.571259][T32169] loop2: detected capacity change from 0 to 512 [ 1051.582698][T32169] EXT4-fs (loop2): Invalid log block size: 402653185 17:31:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000190000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.600426][ C1] sd 0:0:1:0: tag#7236 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1051.610283][ C1] sd 0:0:1:0: tag#7236 CDB: opcode=0xe5 (vendor) [ 1051.616653][ C1] sd 0:0:1:0: tag#7236 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1051.625692][ C1] sd 0:0:1:0: tag#7236 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1051.634737][ C1] sd 0:0:1:0: tag#7236 CDB[20]: ba 17:31:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 1051.652971][T32169] loop2: detected capacity change from 0 to 512 [ 1051.673929][T32169] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1051.703818][T32173] loop3: detected capacity change from 0 to 512 [ 1051.711695][T32173] EXT4-fs (loop3): bad geometry: first data block 9437440 is beyond end of filesystem (128) 17:31:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4a02}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000e000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.811474][T32180] loop2: detected capacity change from 0 to 512 [ 1051.823970][T32180] EXT4-fs (loop2): fragment/cluster size (16777216) != block size (2048) [ 1051.859808][T32173] loop3: detected capacity change from 0 to 512 [ 1051.866649][T32173] EXT4-fs (loop3): bad geometry: first data block 9437440 is beyond end of filesystem (128) 17:31:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000191000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.948234][T32180] loop2: detected capacity change from 0 to 512 [ 1051.976487][T32180] EXT4-fs (loop2): fragment/cluster size (16777216) != block size (2048) 17:31:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000180e000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1051.998494][T32186] loop3: detected capacity change from 0 to 512 [ 1052.006090][T32186] EXT4-fs (loop3): bad geometry: first data block 9502976 is beyond end of filesystem (128) [ 1052.044332][T32183] ================================================================== [ 1052.052427][T32183] BUG: KCSAN: data-race in netlink_getname / netlink_insert [ 1052.059723][T32183] [ 1052.062038][T32183] write to 0xffff88816e8d8b10 of 4 bytes by task 32182 on cpu 0: [ 1052.069750][T32183] netlink_insert+0xe8/0x900 [ 1052.074342][T32183] netlink_autobind+0xae/0x160 [ 1052.079102][T32183] netlink_sendmsg+0x48a/0x7d0 [ 1052.083874][T32183] ____sys_sendmsg+0x39a/0x510 [ 1052.088642][T32183] __sys_sendmsg+0x195/0x230 [ 1052.093232][T32183] __x64_sys_sendmsg+0x42/0x50 [ 1052.098007][T32183] do_syscall_64+0x44/0xd0 [ 1052.102421][T32183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1052.108314][T32183] [ 1052.110656][T32183] read to 0xffff88816e8d8b10 of 4 bytes by task 32183 on cpu 1: [ 1052.118280][T32183] netlink_getname+0xbb/0x180 [ 1052.122962][T32183] __sys_getsockname+0x11d/0x1b0 [ 1052.127922][T32183] __x64_sys_getsockname+0x3e/0x50 [ 1052.133038][T32183] do_syscall_64+0x44/0xd0 [ 1052.137452][T32183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1052.143350][T32183] [ 1052.145669][T32183] value changed: 0x00000000 -> 0x0000277d [ 1052.151376][T32183] [ 1052.153685][T32183] Reported by Kernel Concurrency Sanitizer on: [ 1052.159819][T32183] CPU: 1 PID: 32183 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 1052.168577][T32183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1052.178629][T32183] ================================================================== [ 1052.187187][T32188] loop2: detected capacity change from 0 to 512 [ 1052.196965][T32188] EXT4-fs (loop2): Invalid log block size: 402653185 [ 1052.244970][T32186] loop3: detected capacity change from 0 to 512 [ 1052.252851][T32186] EXT4-fs (loop3): bad geometry: first data block 9502976 is beyond end of filesystem (128) [ 1052.254698][T32188] loop2: detected capacity change from 0 to 512 17:31:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x4c00}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000039c000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1052.285993][T32188] EXT4-fs (loop2): Invalid log block size: 402653185 17:31:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{}, r9, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x6}, 0x0) 17:31:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000000f000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1052.353803][T32193] loop3: detected capacity change from 0 to 512 [ 1052.369743][T32193] EXT4-fs (loop3): bad geometry: first data block 10224384 is beyond end of filesystem (128) [ 1052.428484][T32200] loop2: detected capacity change from 0 to 512 [ 1052.435390][ C1] sd 0:0:1:0: tag#7241 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1052.445236][ C1] sd 0:0:1:0: tag#7241 CDB: opcode=0xe5 (vendor) [ 1052.445440][T32200] EXT4-fs (loop2): fragment/cluster size (33554432) != block size (2048) [ 1052.451585][ C1] sd 0:0:1:0: tag#7241 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1052.451605][ C1] sd 0:0:1:0: tag#7241 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:31:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x0, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1052.478040][ C1] sd 0:0:1:0: tag#7241 CDB[20]: ba [ 1052.499750][ C1] sd 0:0:1:0: tag#7242 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1052.509626][ C1] sd 0:0:1:0: tag#7242 CDB: opcode=0xe5 (vendor) [ 1052.515965][ C1] sd 0:0:1:0: tag#7242 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1052.524977][ C1] sd 0:0:1:0: tag#7242 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1052.534004][ C1] sd 0:0:1:0: tag#7242 CDB[20]: ba [ 1052.544178][T32193] loop3: detected capacity change from 0 to 512 [ 1052.551359][T32193] EXT4-fs (loop3): bad geometry: first data block 10224384 is beyond end of filesystem (128) [ 1052.559650][T32200] loop2: detected capacity change from 0 to 512 [ 1052.572731][T32200] EXT4-fs (loop2): fragment/cluster size (33554432) != block size (2048) 17:31:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002a0000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000011000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1052.678620][T32210] loop2: detected capacity change from 0 to 512 [ 1052.686034][T32209] loop3: detected capacity change from 0 to 512 [ 1052.695340][T32209] EXT4-fs (loop3): bad geometry: first data block 10486272 is beyond end of filesystem (128) [ 1052.707695][T32210] EXT4-fs (loop2): fragment/cluster size (134217728) != block size (2048) [ 1052.731505][T32191] __nla_validate_parse: 28 callbacks suppressed [ 1052.731521][T32191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1052.773469][T32210] loop2: detected capacity change from 0 to 512 [ 1052.780594][T32210] EXT4-fs (loop2): fragment/cluster size (134217728) != block size (2048) [ 1052.789908][T32209] loop3: detected capacity change from 0 to 512 [ 1052.801150][T32209] EXT4-fs (loop3): bad geometry: first data block 10486272 is beyond end of filesystem (128) 17:31:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5865}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1052.848026][T32197] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:26 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000014000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002a1000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1052.951857][T32215] loop2: detected capacity change from 0 to 512 [ 1052.963173][T32217] loop3: detected capacity change from 0 to 512 [ 1052.973955][T32215] EXT4-fs (loop2): fragment/cluster size (1073741824) != block size (2048) [ 1052.987057][T32217] EXT4-fs (loop3): bad geometry: first data block 10551808 is beyond end of filesystem (128) 17:31:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 1053.011704][T32213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1053.053538][T32215] loop2: detected capacity change from 0 to 512 [ 1053.060701][T32215] EXT4-fs (loop2): fragment/cluster size (1073741824) != block size (2048) [ 1053.092388][T32217] loop3: detected capacity change from 0 to 512 17:31:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000020000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.101245][T32217] EXT4-fs (loop3): bad geometry: first data block 10551808 is beyond end of filesystem (128) [ 1053.146097][T32223] loop2: detected capacity change from 0 to 512 [ 1053.153297][T32223] EXT4-fs (loop2): Invalid log cluster size: 32 17:31:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002ab000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.187884][T32223] loop2: detected capacity change from 0 to 512 [ 1053.201845][T32220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1053.214143][T32223] EXT4-fs (loop2): Invalid log cluster size: 32 [ 1053.220878][T32227] loop3: detected capacity change from 0 to 512 [ 1053.252196][T32227] EXT4-fs (loop3): bad geometry: first data block 11207168 is beyond end of filesystem (128) 17:31:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000025000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x1) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRESDEC=r10, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r6, @ANYRES32, @ANYRES32, @ANYRES64=r9, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r9, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{}, r9, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000240)={{r4}, r9, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x45, {0x1, 0x3f, 0x9, 0xfffffffffffffff7, 0xb4}, [0x4, 0x7ff, 0x3, 0x9]}}, @subvolid=0x8}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1053.296749][T32227] loop3: detected capacity change from 0 to 512 [ 1053.316087][T32227] EXT4-fs (loop3): bad geometry: first data block 11207168 is beyond end of filesystem (128) 17:31:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x0, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002ac000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.344999][T32231] loop2: detected capacity change from 0 to 512 [ 1053.360962][T32213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1053.373572][T32231] EXT4-fs (loop2): Invalid log cluster size: 37 [ 1053.408068][T32236] loop3: detected capacity change from 0 to 512 [ 1053.415281][T32236] EXT4-fs (loop3): bad geometry: first data block 11272704 is beyond end of filesystem (128) [ 1053.443036][T32231] loop2: detected capacity change from 0 to 512 [ 1053.450658][T32231] EXT4-fs (loop2): Invalid log cluster size: 37 17:31:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5a03}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1053.458296][T32236] loop3: detected capacity change from 0 to 512 [ 1053.469555][T32236] EXT4-fs (loop3): bad geometry: first data block 11272704 is beyond end of filesystem (128) 17:31:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000002e000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.501995][T32238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:31:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002ad000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.549642][T32242] loop2: detected capacity change from 0 to 512 [ 1053.568911][T32242] EXT4-fs (loop2): Invalid log cluster size: 46 [ 1053.578594][T32244] loop3: detected capacity change from 0 to 512 [ 1053.585441][T32220] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1053.594957][T32244] EXT4-fs (loop3): bad geometry: first data block 11338240 is beyond end of filesystem (128) [ 1053.633021][T32242] loop2: detected capacity change from 0 to 512 [ 1053.663616][T32242] EXT4-fs (loop2): Invalid log cluster size: 46 17:31:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) 17:31:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100007f3e000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.695799][T32244] loop3: detected capacity change from 0 to 512 [ 1053.707199][T32244] EXT4-fs (loop3): bad geometry: first data block 11338240 is beyond end of filesystem (128) [ 1053.755494][T32248] loop2: detected capacity change from 0 to 512 [ 1053.762834][T32248] EXT4-fs (loop2): Invalid log block size: 2130706433 [ 1053.772540][T32246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 17:31:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002b6000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1053.816857][T32248] loop2: detected capacity change from 0 to 512 [ 1053.849543][T32248] EXT4-fs (loop2): Invalid log block size: 2130706433 [ 1053.857294][T32238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1053.867116][T32252] loop3: detected capacity change from 0 to 512 [ 1053.899866][T32252] EXT4-fs (loop3): bad geometry: first data block 11928064 is beyond end of filesystem (128) 17:31:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000003f000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5c02}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1053.984640][T32255] loop2: detected capacity change from 0 to 512 [ 1053.994056][T32252] loop3: detected capacity change from 0 to 512 [ 1054.012781][T32255] EXT4-fs (loop2): Invalid log cluster size: 63 [ 1054.024123][T32252] EXT4-fs (loop3): bad geometry: first data block 11928064 is beyond end of filesystem (128) 17:31:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000edc0000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.062892][T32255] loop2: detected capacity change from 0 to 512 [ 1054.069874][T32257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1054.107188][T32255] EXT4-fs (loop2): Invalid log cluster size: 63 [ 1054.115984][T32261] loop3: detected capacity change from 0 to 512 [ 1054.132250][T32261] EXT4-fs (loop3): bad geometry: first data block 12643584 is beyond end of filesystem (128) 17:31:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) socket$caif_stream(0x25, 0x1, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r8, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000740)={{}, r7, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000040000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x0, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1054.186577][T32261] loop3: detected capacity change from 0 to 512 [ 1054.193551][T32261] EXT4-fs (loop3): bad geometry: first data block 12643584 is beyond end of filesystem (128) [ 1054.247476][T32266] loop2: detected capacity change from 0 to 512 [ 1054.266266][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 1054.266296][ C1] sd 0:0:1:0: tag#7249 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1054.279444][ C0] sd 0:0:1:0: tag#7250 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1054.282733][ C1] sd 0:0:1:0: tag#7249 CDB: opcode=0xe5 (vendor) [ 1054.292532][ C0] sd 0:0:1:0: tag#7250 CDB: opcode=0xe5 (vendor) [ 1054.298852][ C1] sd 0:0:1:0: tag#7249 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1054.305158][ C0] sd 0:0:1:0: tag#7250 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1054.314157][ C1] sd 0:0:1:0: tag#7249 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1054.323171][ C0] sd 0:0:1:0: tag#7250 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1054.323193][ C0] sd 0:0:1:0: tag#7250 CDB[20]: ba 17:31:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffffffda000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.332194][ C1] sd 0:0:1:0: tag#7249 CDB[20]: ba [ 1054.364881][T32266] EXT4-fs (loop2): Invalid log cluster size: 64 [ 1054.376293][T32272] loop3: detected capacity change from 0 to 512 [ 1054.383843][T32272] EXT4-fs (loop3): bad geometry: first data block 14352383 is beyond end of filesystem (128) 17:31:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 1054.408835][T32266] loop2: detected capacity change from 0 to 512 [ 1054.417085][T32266] EXT4-fs (loop2): Invalid log cluster size: 64 17:31:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000044000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.453406][T32272] loop3: detected capacity change from 0 to 512 [ 1054.460480][T32272] EXT4-fs (loop3): bad geometry: first data block 14352383 is beyond end of filesystem (128) 17:31:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5c03}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000e2000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.498909][T32276] loop2: detected capacity change from 0 to 512 [ 1054.535782][T32276] EXT4-fs (loop2): Invalid log cluster size: 68 [ 1054.588441][T32276] loop2: detected capacity change from 0 to 512 [ 1054.614067][T32276] EXT4-fs (loop2): Invalid log cluster size: 68 [ 1054.622355][T32282] loop3: detected capacity change from 0 to 512 [ 1054.630690][T32282] EXT4-fs (loop3): bad geometry: first data block 14811136 is beyond end of filesystem (128) 17:31:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000064000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.717043][T32282] loop3: detected capacity change from 0 to 512 [ 1054.726218][T32282] EXT4-fs (loop3): bad geometry: first data block 14811136 is beyond end of filesystem (128) [ 1054.735006][T32285] loop2: detected capacity change from 0 to 512 [ 1054.744163][T32285] EXT4-fs (loop2): Invalid log cluster size: 100 17:31:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000ffffffe2000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.786630][T32285] loop2: detected capacity change from 0 to 512 [ 1054.803703][T32287] loop3: detected capacity change from 0 to 512 [ 1054.810548][T32285] EXT4-fs (loop2): Invalid log cluster size: 100 [ 1054.819202][T32287] EXT4-fs (loop3): bad geometry: first data block 14876671 is beyond end of filesystem (128) 17:31:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f00000000000000010000007f000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.879490][T32287] loop3: detected capacity change from 0 to 512 [ 1054.896605][T32292] loop2: detected capacity change from 0 to 512 [ 1054.913135][T32287] EXT4-fs (loop3): bad geometry: first data block 14876671 is beyond end of filesystem (128) [ 1054.923441][T32292] EXT4-fs (loop2): Invalid log cluster size: 127 17:31:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000003e4000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1054.993385][T32292] loop2: detected capacity change from 0 to 512 [ 1055.019790][T32292] EXT4-fs (loop2): Invalid log cluster size: 127 [ 1055.033980][T32294] loop3: detected capacity change from 0 to 512 [ 1055.042514][T32294] EXT4-fs (loop3): bad geometry: first data block 14942976 is beyond end of filesystem (128) 17:31:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) socket$caif_stream(0x25, 0x1, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="60dc28539ad322bdf29f1d7e9f769cdc255eaa781e12d653b0e7d95ad19dd07303052eaaf9e19040d1ffad893e2c1086216692fca74bbb3f4b9c80a8aeb7f658ce0d20da592f465209bfbd4314bede3ef9ab181f265b221430011de3e250e5a656085f7a82abd02fea02564fbba92e538f3033c0feb4c1ff097938ac9d714b415a56786834541226569fbac301195d00ce823f5d377ca81edc80ae3feca7ca43283e0e95c7eb10ff9141dcc13ff65a5fe35fb92e830bffd495eb4e2a63a1ee6c54728a2f6e1ff52cc228a206f87a265dc0e0f62947901b79ee3e985a87e8415a877ed14f4dfaa273783e303f32dfc6e27d3b2037f25ed7ca238ca5284dbd6dbe7d83d554e94a0b2ff4f0225f23425e64d6756200b1764ad549178694b1a8ef97448e9cb41d673d4d768e7f4fea2488ff732a7121f8ff38fa8c8c8d7434b540a31d0ebb7db21c27f9ed61d8f46c50bdbe12b8e914df5dc12f5a92fb52ea22b287a7d162c4415b417f2cd87e2410b46328ebbd801f208393b97af0dc9546aafac23ce0f5fdbab900688e5b3fc122e22494e445c1dbfb088cedc1c482542305778a78868129a0fe3d83a46eb6bd3e1f7418f30badf38b9a8decfb4ca235224331739322f4c1027f4517375a8152317e1ac46b0b7e5fc60e0925e65a1994e69f4ab44a3c7b28a20acf099db4596edbad01095e7391582393590cd715a2ebdfc8605f7e1fa05aa7f00c081de73dd24c51c60e6c2ba55d2138a45ed8276e775948ec1f85348dd5242e6bc25c759615c005b61ad36cfb9738b5364b3b3fee21423cd7d09d771776fcec2697e7b525e6b246b5f16139e023cf58b51c91b0e81732c9931d9a3a0c83e7021bb3cf78109bc887fed8e5514a81d717aef26605334fc1e128662d19677a01b1c364b8287a1ac157301b28cedd9c4975f94c040e04ee78183af3a1041f1b0a415b96ac7e0797120144713590a6a784c3136d85c252990d23c5ca2052852f9f5cca77ee529b5ddf5096c0a3c6e2f376c47e4e9170061fc37cc0741be474b3b3d93460c4a11d1bae43a019378a99b2a54a29ab8a4cf34616a5f029486c0959443493ea4db3d6e2e1392844be384e2466a7c5a1f36c12a1733abe1a81f75a147c176466877a2d66f180a5ad007c5ed4663fa85a01f5cf1efe025f3e98a5bb4992da29ae896b7f2101081e550cbdaf09d4d3b649248cde73a420053274368ec96eda88aa0cb4100b5a912d6a93fd3abef932d865cb550cc143b81e4267820667e815642580e6551d7449e19b919f3a5f7939ac50f0469dafd002fa4e2ae34b8fb9706fe6aedd03703e35d74dac8a19ff79cb71b528a8d0f2b9c589ec439855e702c6433f4604e6624e714bb187a171a5b332154468cbe7e207d912d2a099c49cac772c0ca9d0312902e810a4baddbf6fbb40c6f52447f5402025cd18a0b8b33ab1e2cece19410931658abee334f65f95f3d1208e37f0e9f92613adbb67b3fa50a3abbefdfb75be431f8dff2a26ff562022863c4ac0a10f13063c34f0e97ba400df3549450e5b64abcbff0bbeb22afddedcebe600c42c565fe962679d74ad1857fae1dcd431625e2ac46b2e715d1a94b001123960d17b2b6a5347b0b39e20d35fed65f534da616bcdc7fad2f2ae631a3e1d1e609f656f07975a4c197e13a816374ca0d19305162d4ff586f35b880a071be86e8d019796f43639d2537287b90e0102947f402e38439979b79e6f3d8d192cfeb1b8aa447954a74476d779caef1b73577696ce6ce2e6a83938f53aa07d360d12a6c3311badbfa9423cdbb2a9daf8cab116d673742bde0842659603a9466038fdc44f54906bda17552b55df36b926fff1bd480fe0d24dc849bcd3508249a6711521f9506d029581c0e0021b0e9bb30afa57e601ebdebcbd56a6556c7a822e4a4b08e0d49202a17a50bc29542abc8341136fd634b49a0e389812a626d6c2d17efebf83d0404303d2658286af69b82e11c76578c1dbfee11deaf9f4b02ffcf4399f95bff62aaa8069cf27396b976aacac1947cde90be49109a079a1253cc2b2eb0a02e9f51fe389d16ffab8679216d475f670189ab5a7a24fc7673ce670c2770734daf94a963afa875297fa06f144f4024263d639909a97c9f125126819054f95ac03c787140a91b7aa3486201eec0def7e818d710e1e1efddf1989883dc2d9719523ccfe1b441d97cdcb51d99cfe2e62fe4004955876ce2889a0dcdc81a75fd9310601b1dac8b555a25c8f73ea46e653e8422ea3219e2b976ad184bcf8cd0a6f4bc04d0b48e11fdde224bff5252dbde02c19d7fa159c3406050fa05d4a8a51761334fe0d249e94344b46cd0dd9d013742abdbd7e46ff87236065acadafbfd9519704b03963eb12e8591eeade2cd4fdd46fe9dbce528e554b69dbe5ec95944989980047911561447b6b081615d35419accce7d71b587e0e4e3d9e6c168227c6d58830d1ea15e111f696771bdb064321646d2a0fd4ac0208c2812589a8690c831221a2033ba99832f1150ba42511303c9b357e96cc9d4159863d9d900e2a2607f65d0b822408035558cf338c11414bc4dc061464fa375fdd964f6c3a8f66b62b2d13b7eb490eac1e129f601aa6cc9c1bb650c8d56e93c170ee8d979730f12053f8f9ab734a51e0486ed445832d96f197bc862133c13627e962437928683c8566baa57b6e6766efb389325aeed617718943335c43dfe07266ddf11f964f5780412896240e2a81dc8147036280bb4863cad3a97e059c181fa8688eaf8b64615b1e48dc50bd6dd0f308a608922f0fa818d65cf86f34fc2c249adc8d122eecd8a4d3186c4fb8185f5b5073d1c44dd5ceb1388d3b01f1ade8f7fffbf08a284bd8fb7dc1f92c21397e2c6bd8e9bb90201215b99c59ee8c0f203aa2d26ab631e0e8c31b479e1f73b6b02713c981f6052225fe9cfe6676a538ccab521cbf0c1afcd4b852f9b6005ffa3532e7302e49722cd45bb86d91eaf07be3a5751038b1c934ac1b32c7ba174fe97925781b2314b7b51dff0fd17a861d82696fdd28875ecec0f070632ddf52204f0554beb62d9552c4676ae764fba911c6de34183d2a0e36707e764aba4a350d1ea795c7083a819280953dd3296ac4c72fc8ad73eb19871e798953d21693f6894e7e37fd8b8d4ea4b0921e3b4b62b44ad20904fa0db6a8ef7a99fa8ee990f77c599ac059e6235b2008bdeb18fdd629cefe17e67eb0d97d71fd95a702d092ec3a5498fbdf581ada695420d5cfedaad5fa73c7d477d4b3cea725b55b9e519ca180a17064b50dda81cc0435026fe82e753bcc34be755067ed0c884aebd4242e3860bb1adda1e894dbe82140f51dbf23c6d40bfc3ef46955b7f2db39576ed9109525991415978b1cdcd7db64e8b7684551e4ed2ad2acb6b9b323e2db25f56dddfcaa2685bec7ad5b146f0f0bb44c6a42434d57afe3ea0e226824b97b9298fb1be6f22073fd47b89d44b5030c992d9a831fa4a1df188455a0d1b284a1e936ccd5de0f190f111b48319cb5b56b210f5837c7b7c07567994005b5b7e135f8d8e0c7d01bb1c2bd8d2c68a57e07eb233dc246d3d65dcb019e4b05b9aa7788ff13af22e45350da982e82125939b9605f7aab4f9788537441646e08a63fcaaf3e1eac3d6842cb67d07b7f67e3de503e8cb897c1d19eacc60b414320096da4a8081adc38e68d9a2785324614b5c2da39837910251fe549b219d99273bc26c01cbdb717ec44ff53376816dd24e5d804f1f2f3c7c89ca446d4b6e801414dbdbf9e7f2f5588b90794143e9b2dacbfd648e177235ce3833576d1d8da87b9761044c75eae036aa13e838a961419579595f914330029e50c62d6c6e90d806a6778611e3f61e8b2d2081dc65833a8695887cf84b0bbb052f3607889ed39a3a6ff5da525ce4fefab5717bd14341ec7d5577a1e4b1d5dd48ad897fae5dbfab73b9e15fc7e36de87f753f17df3930ad8cc983a40b55c287e74e9131cfd4e84470931d3c20d33750ea2d9e5078a71cdf1bcad56d1e9eb898060883a4ccf62de3128565e784acc76488e3d2b396c1ff1649e40122b90c106f10506e5a581a6360bc486b257813c530bfc60747e449172f36cdc114696ecaa61ece7b7c727af3dcaaccc0b8e608f449069483e15aa89c4c3820d52f2c20e685ecbc3853c538a8f021ab8472033b59c5194443e4f5472c06e63a1975039e41ed1c93eac3bc17eff69d04970ce50820d10be0ba576eb5d74295c4143dd4ad5a8a63996c033ef720eec5b8c3a62f47a1d98adfd19e636509a95b7160e685a72389133f9afc6a1ff424130fa11f5b1e31979ba7cf90bf72d9398fcf0a22295abd061a69bf4d19578e9aaaa7e1cdb29ec28fe5d8303222d1896b5e4bfe73ee41c8badd55a995b6e24b2d2a7748e8ccac2cb50517c39fd0a5c8f46d6a65e4a9b888ebc1c649bf73a0a6af61e49b89b2aa47128d55957c03eb0284965fe4013b7fbe8a3a385b3e9bfa8007a99aba7c185b498e8c92fb21e98a22fa4ae8a1c491b1827056207f40420eccde4ccf0b2fbfadceaa045595eadc286d1a3b7dd9281a3adc5c1717a8ef0682d04332b8a62b40ef1fb0b15c991e4a4d85c244ea94e61c1434ad5ad6252792dd45eb6771a01e15c7a2b3060402bd5718b9fbaac31d51cda17d6011be274eabe10d8540bc85ad6c70876a333727c395db51899d6c6f32529b20dff851d53bff404adfe007451c061f6938334afb8bb29c9205303314ea18ce49c7bf1befb8c1067bc3db541640c0d330c3705ec17ae8f8ceb882a2192daaa28965629e8761fd90514cae5eca2dc80790f86100ee28f8a45e3378e59896ef75322e512e875540fc2f8327a38c04d462d0a8a7c898c3e5b8d9abc27f07d90ac0f35f970047b828076d457fb0c0267169161b6438d41612411506b25df1b42bd01cdefa72bfedf53f892962a6a3514bdf7b8c222e5f8d281da2171103cd0f8a0b852e7f2cc91b993e2a308f05938aef105d4b31deb77fd03f297e1c3c90cc3f0c4d8f6f4e67d7f5f008eba72f35209d176696b455932c85d7f7f3bf6a31894bae5d93fe2e0ae3eb85d1ee9e3469443a836c3cb0b2b943f1c692e0a3f43529b960a9dcd19f4e2a82d37b67ce03d94431baa7c4a790ba432ddaafd7354c3aabe7f46c43f30b5b3b9add1ce1c823b1744bec4a151d222f36d4c6c9d10ba870e388851dbb62105df770774ef8db6ab34b35a20518069150ba36da577dcf16177a56ad2dbdfe415e4fa620d604130b57d485278608675aa0286df0fbdabfd59569defa54e7d1bdf847c6b8f086fb5de7a45e62e29a348feeb3c8f7c41f7946a7eed0fa69a5c47d5cfb87b8255bb1db7fe56ad39a11c16a5eb295cc38751920da353c7180b36bb11f098e9d1d764d176c507a0da651e4f52933f0531a446980574f5b69738dae5d3499bf662b2aac558572785b6f0ef0973c4521714816d9331a75687f20b702e5da5c1137b1fa6244125ae16c13afe0d45c95434cdf162adb5596e5bf2ab982dedf56342b5ff093baf9971c7f5e9f7b1acef106ec66ba4e2766140f6cbc3266e26e1e872fa6b9e850c48702f1cd40f65dac0084028c7f2bf054dc197f69b433e65a21c0a29e32c1e566e84d87609e0ccfcc374874e958a63c38f2870e9ce8a6eebc9db8bf3daa297a036d717fe2b5f8bfd6e0fc14fc797c83e4c72", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r8, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000740)={{}, r7, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0xa}, 0x0) 17:31:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x5e01}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000081000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x80, 0x0, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1055.087092][T32294] loop3: detected capacity change from 0 to 512 [ 1055.093786][T32294] EXT4-fs (loop3): bad geometry: first data block 14942976 is beyond end of filesystem (128) [ 1055.149659][ C1] sd 0:0:1:0: tag#7251 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1055.159544][ C1] sd 0:0:1:0: tag#7251 CDB: opcode=0xe5 (vendor) [ 1055.165893][ C1] sd 0:0:1:0: tag#7251 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1055.174923][ C1] sd 0:0:1:0: tag#7251 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1055.183982][ C1] sd 0:0:1:0: tag#7251 CDB[20]: ba 17:31:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000002e6000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.196510][T32303] loop2: detected capacity change from 0 to 512 [ 1055.207649][T32303] EXT4-fs (loop2): Invalid log cluster size: 129 [ 1055.216096][ C0] sd 0:0:1:0: tag#7252 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1055.225968][ C0] sd 0:0:1:0: tag#7252 CDB: opcode=0xe5 (vendor) [ 1055.232319][ C0] sd 0:0:1:0: tag#7252 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1055.241392][ C0] sd 0:0:1:0: tag#7252 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1055.250453][ C0] sd 0:0:1:0: tag#7252 CDB[20]: ba [ 1055.268506][T32309] loop3: detected capacity change from 0 to 512 [ 1055.275955][T32309] EXT4-fs (loop3): bad geometry: first data block 15073792 is beyond end of filesystem (128) [ 1055.303087][T32303] loop2: detected capacity change from 0 to 512 [ 1055.317636][T32303] EXT4-fs (loop2): Invalid log cluster size: 129 17:31:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000089000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.366213][T32309] loop3: detected capacity change from 0 to 512 [ 1055.386785][T32309] EXT4-fs (loop3): bad geometry: first data block 15073792 is beyond end of filesystem (128) [ 1055.393586][T32315] loop2: detected capacity change from 0 to 512 [ 1055.404837][T32315] EXT4-fs (loop2): Invalid log cluster size: 137 17:31:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000003e6000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.446711][T32315] loop2: detected capacity change from 0 to 512 [ 1055.484156][T32315] EXT4-fs (loop2): Invalid log cluster size: 137 [ 1055.485397][T32317] loop3: detected capacity change from 0 to 512 17:31:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001ffffffc0000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.531050][T32317] EXT4-fs (loop3): bad geometry: first data block 15074048 is beyond end of filesystem (128) 17:31:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6000}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) [ 1055.573313][T32317] loop3: detected capacity change from 0 to 512 [ 1055.575000][T32319] loop2: detected capacity change from 0 to 512 [ 1055.587215][T32317] EXT4-fs (loop3): bad geometry: first data block 15074048 is beyond end of filesystem (128) [ 1055.603567][T32319] EXT4-fs (loop2): Invalid log block size: 4294967041 17:31:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000fffffff0000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.673102][T32319] loop2: detected capacity change from 0 to 512 [ 1055.686243][T32319] EXT4-fs (loop2): Invalid log block size: 4294967041 [ 1055.699024][T32324] loop3: detected capacity change from 0 to 512 [ 1055.707526][T32324] EXT4-fs (loop3): bad geometry: first data block 15794175 is beyond end of filesystem (128) 17:31:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000000d8000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1055.769796][T32326] loop2: detected capacity change from 0 to 512 [ 1055.780156][T32326] EXT4-fs (loop2): Invalid log cluster size: 216 [ 1055.788356][T32324] loop3: detected capacity change from 0 to 512 [ 1055.799235][T32324] EXT4-fs (loop3): bad geometry: first data block 15794175 is beyond end of filesystem (128) [ 1055.843682][T32326] loop2: detected capacity change from 0 to 512 [ 1055.851842][T32326] EXT4-fs (loop2): Invalid log cluster size: 216 17:31:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10200, 0x1, 0x5}, 0x18) socket$caif_stream(0x25, 0x1, 0x1) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)=ANY=[@ANYBLOB="7549f8187a2a6e40594b4473692aef0dda6d1a46f2019ed7e86b1d711c76877056283bedab9579d2125c7cad3b1f28c963b3a626ef87b075574ff5612ccc80d8e14883ad2a8e6516a15c410ce005b2e841ebacd55a1365c685244ec3b66b003e7ec96ed005906d578130183c370d6e172da9d1"]) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e80)={0x0, ""/256, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0xffffffde}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000100)="f4a4848461fb0592d2f8db4c1f3c9e408788e03d28fe5e69dbceea46dd67888cdedd07a068040b956c3af7", 0x2b}, {&(0x7f0000000880)="08dc2e1bf90c2ba962b3647a5cab9320f628cd54c3531cbeb3fd72bff2ac645e4a88f4337729c342c50bd670b63ef854347cc784742350a570002f4e709536779a20d681c95d88a6a01aca02ec4b1f1900d3a0", 0x53}, {&(0x7f0000000900)="2106b041bf04bc78f186e175a681097cc05e5c6e05c598e7a6200982dddfcc7665879b2b84e41266f023185a157002ca9aa25a136d69bdde1db960b515f664e1f4ce31b5419f6765b41ec989c1b15395a4a1f0c1ea438021e93fe916638263ed1a96d0d2a9abe181c18400f5f156e82e80131bc37deeeeccb37fd1e522d531247f3a9b7da0672771de4d6f269751ac41e67489b9ae9713c6da5c48265b955a50cc4f5417ff8169aced03cf61d5e7066d4426e1", 0xb3}, {&(0x7f00000009c0)="7b856c6f002b10267d59fef353e19c4a305b9d928a79d1d1491d10760aa9b3643cba33d77823da3bbaca62c61d8d1ed18fd6e6b9fb66b274ca684ad1dc814c9727dd68d5f8d37b262c391620d5cc2f1ef7fcf8c6122e0959150679539527e0001fdba8304276d23ed391cbf483320559fcd6fc2db8ffb36430ad7ed3183817", 0x7f}, {0x0}, {&(0x7f0000000b00)="92d337da9a6de3995f045d2d77b8fee943c7c0db8692360efe32cc4eb0e26ee5f6d3a1dbfbba605961033a18333e9408d4fb391763c59603061b78d6feb70cd496a0ea30ba97f0f2e0a6d08eec7b9a3178c33eee24c51bd6812518c803eb1387d445", 0x62}, {&(0x7f0000000b80)}, {&(0x7f0000001340)="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", 0xfc0}, {&(0x7f0000000c00)="0c494d31e73797c7cfb0cd1932ec6f595ac0dea6cb7618d4c3e79651f7dfd89ee3bb9a2d5834ba1c72c7cbe0995b5ca6285ca65aa9b4ab5ce36f31051573eeb82ee48ac42955c2886455ffbe2be5c45df1f15fb653e2c2f1f5ac54445456a135cbd85feaa76d8daf4eeb77b90977b997ce520265fe51a004abe2d7a8de7acde9ee034783ed3ff6a4a7305348686b1440154ee2977fc6089d38f0c815eeca9db5399680b57145556a18c67a074dec113aa1", 0xb1}, {&(0x7f0000000d00)="92ea897d519861c1a07664a01ea8f92197f5fa162cc9ce7638a6576f3229e39a23c668a7bb2318077c5ddb18dcb432645e33a6ea2d4878dea4b2a9f2dabe329fb03111130a358ac163798f5b392eba29d987cba0308f96224dcbd3f17ae5edff3081f5b589a7c4891bbb0bae806a1ea7b16692613a4c3e437a8b0f2d593438a5f0d80d078077c9c95afa082069caf574c31d9e42c53bfaadb5956cb74d037bca0b47903f", 0xa4}], 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, {{0x0, 0x0, &(0x7f0000003180)=[{0x0}, {&(0x7f0000002fc0)}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="c9252cdfb191d94ef15953a086ed40b24a018fb18d39f9a1256b33cf339f1d1bb52846ddaaaecd492eb1d0774b26968a44bf794e9d902a3c02af9543bc4096ac7a27f942ecc1681e7e4b87a8c26eb5d62c108676e9d21f26a6765bff540a52e62ceb", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYRESDEC=r8, @ANYRES32=0x0], 0x50, 0x4041}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="007a01005949140000000000800001000000f1000000", @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYRES64=r7, @ANYRES32, @ANYRES32, @ANYBLOB="280000000000000001000000010000", @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRESDEC], 0xd0, 0x20000000}}], 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, r7, 0x2, @inherit={0x70, &(0x7f0000000200)={0x1, 0x5, 0x9, 0x1000, {0x34, 0x200, 0xffff, 0x6, 0xfff}, [0xfffffffffffffffa, 0x4, 0x3000, 0x20, 0x2]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000740)={{}, r7, 0x2, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x456b, 0x7fff, {0x0, 0xbae7, 0x3, 0x8, 0x2000000000}, [0x1000, 0x8, 0x4b4, 0x8]}}, @subvolid=0x44cb3b36}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x2, {0xc2e, @struct={0x1, 0x4}, 0x0, 0x3f, 0x4, 0x800, 0x7, 0x100000000, 0x80, @struct={0x1, 0x7}, 0x2, 0x6, [0x4, 0x1, 0x0, 0x40, 0x4, 0x70a8]}, {0x3ff, @usage=0xffffffff, 0x0, 0x0, 0x5, 0x3, 0x80, 0x53a, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) 17:31:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5401d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}, 0x1, 0x0, 0x0, 0xb}, 0x0) 17:31:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000003f4000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000000d9000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000000000000000000000200", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x6002}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 17:31:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001800)={{}, 0x0, 0x2, @inherit={0x58, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xfff}, [0x0, 0x0]}}, @subvolid=0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002800)={0x0, 0x0, {0x0, @struct={0x1}, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, @struct={0x1}, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x70a8]}, {0x0, @usage, 0x0, 0x0, 0x5, 0x3, 0x80, 0x0, 0x483, @usage=0x80000000, 0xffffffff, 0x5, [0xfffffffffffffffc, 0x0, 0xfffffffffffffff9, 0x4, 0x3, 0x800]}, {0x5, @usage=0x311d928a, 0x0, 0x5, 0x8, 0xfffffffffffffffb, 0x4, 0xff, 0x486, @struct={0x100, 0x800}, 0x400, 0x8000, [0x0, 0xfffffffffffffff7, 0x2, 0x2, 0xfff, 0x6]}, {0x6, 0x8, 0x8000}}) sendfile(r2, r0, 0x0, 0x3fe00) [ 1056.099512][ C1] sd 0:0:1:0: tag#7253 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1056.109368][ C1] sd 0:0:1:0: tag#7253 CDB: opcode=0xe5 (vendor) [ 1056.112496][T32336] loop2: detected capacity change from 0 to 512 [ 1056.115757][ C1] sd 0:0:1:0: tag#7253 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1056.131175][ C1] sd 0:0:1:0: tag#7253 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1056.140216][ C1] sd 0:0:1:0: tag#7253 CDB[20]: ba [ 1056.147578][T32340] loop3: detected capacity change from 0 to 512 [ 1056.158543][T32336] EXT4-fs (loop2): Invalid log cluster size: 217 [ 1056.182380][ C1] sd 0:0:1:0: tag#7254 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1056.192251][ C1] sd 0:0:1:0: tag#7254 CDB: opcode=0xe5 (vendor) [ 1056.198619][ C1] sd 0:0:1:0: tag#7254 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1056.200623][T32340] EXT4-fs (loop3): bad geometry: first data block 15991552 is beyond end of filesystem (128) [ 1056.207691][ C1] sd 0:0:1:0: tag#7254 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1056.207711][ C1] sd 0:0:1:0: tag#7254 CDB[20]: ba [ 1056.249100][T32336] loop2: detected capacity change from 0 to 512 [ 1056.255943][T32336] EXT4-fs (loop2): Invalid log cluster size: 217 17:31:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000000da000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) [ 1056.347881][T32344] loop2: detected capacity change from 0 to 512 [ 1056.356665][T32344] EXT4-fs (loop2): Invalid log cluster size: 218 [ 1056.363371][T32340] loop3: detected capacity change from 0 to 512 [ 1056.371041][T32340] EXT4-fs (loop3): bad geometry: first data block 15991552 is beyond end of filesystem (128) 17:31:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f0000000000000001000000db000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000002c0)=ANY=[]) 17:31:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008