r2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1, 0x340) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000580)={'mangle\x00'}, 0x28) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) [ 240.286202][T23520] loop0: detected capacity change from 0 to 4 [ 240.292480][T23518] loop4: detected capacity change from 0 to 4 [ 240.300220][T23520] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.310292][T23526] loop3: detected capacity change from 0 to 4 [ 240.316948][T23518] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 240.346220][T23526] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.401644][T23518] loop4: detected capacity change from 0 to 4 [ 240.408628][T23518] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.423851][T23526] loop3: detected capacity change from 0 to 4 [ 240.430565][T23520] loop0: detected capacity change from 0 to 4 [ 240.437384][T23526] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="070000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 240.458264][T23520] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 240.600092][T23561] loop3: detected capacity change from 0 to 4 [ 240.606341][T23566] loop4: detected capacity change from 0 to 4 [ 240.639861][T23561] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.649365][T23566] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.673069][T23582] loop0: detected capacity change from 0 to 4 [ 240.704439][T23582] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.717690][T23566] loop4: detected capacity change from 0 to 4 [ 240.724447][T23561] loop3: detected capacity change from 0 to 4 [ 240.733015][T23566] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 240.747821][T23561] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffffe, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3d0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="080000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000000000000401eddfd0660000"], 0x10) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001480)=""/209, 0xd1}], 0x100000000000025d, 0x8000, 0x10) [ 241.265047][T23612] loop3: detected capacity change from 0 to 4 [ 241.279945][T23616] loop0: detected capacity change from 0 to 4 [ 241.290040][T23616] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.303300][T23618] loop4: detected capacity change from 0 to 4 02:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 241.306173][T23612] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.325367][T23618] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.353469][T23616] loop0: detected capacity change from 0 to 4 02:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 241.367713][T23616] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.384678][T23612] loop3: detected capacity change from 0 to 4 [ 241.391685][T23612] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 241.468838][T23618] loop4: detected capacity change from 0 to 4 02:46:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="090000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 241.513181][T23618] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.535033][T23654] loop0: detected capacity change from 0 to 4 02:46:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3d0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 241.583851][T23654] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.607569][T23661] loop3: detected capacity change from 0 to 4 [ 241.617473][T23661] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.663507][T23661] loop3: detected capacity change from 0 to 4 [ 241.675185][T23661] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.689151][T23670] loop4: detected capacity change from 0 to 4 [ 241.699991][T23670] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.710065][T23654] loop0: detected capacity change from 0 to 4 [ 241.736733][T23654] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 241.776663][T23670] loop4: detected capacity change from 0 to 4 [ 241.784060][T23670] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="410000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20018005, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r2, &(0x7f0000000300)=""/211, 0xd3, 0x200, 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x43, 0xbea, 0x5a, @private1={0xfc, 0x1, [], 0x1}, @loopback, 0x700, 0x10, 0x1, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x55, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') preadv(r4, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x241, 0x0) recvfrom$inet6(r5, &(0x7f0000000080)=""/73, 0x49, 0x100, &(0x7f0000000100)={0xa, 0x4e23, 0x7f, @private0={0xfc, 0x0, [], 0x1}, 0x1994}, 0x1c) write$sndseq(r4, &(0x7f0000000140)=[{0xdd, 0x3f, 0x3f, 0x7, @tick=0x6, {0x9, 0x1}, {0x0, 0x63}, @addr={0xfc, 0xff}}, {0x0, 0x9, 0x4, 0x8d, @time={0x3, 0x81}, {0x0, 0xcb}, {0x3, 0x56}, @raw32={[0x6, 0x3f, 0x2]}}, {0x2, 0x1f, 0x2, 0x5, @tick=0x94, {0x6, 0x4}, {0x3f, 0x3}, @note={0x1, 0xc1, 0x0, 0x9, 0x200}}, {0x7, 0x54, 0x7, 0x7f, @time={0x9, 0x1}, {0x8, 0x2f}, {0x2, 0x3}, @raw8={"efaf41321be62046497f104e"}}, {0x6, 0xa1, 0xae, 0x56, @time={0x511, 0x4}, {0x5, 0x1}, {0x80, 0x4}, @raw8={"268bbc8e7e4f66d68772a4bf"}}], 0x8c) 02:46:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0xfffffffd) 02:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 242.244434][T23715] loop4: detected capacity change from 0 to 4 [ 242.250911][T23713] loop3: detected capacity change from 0 to 4 [ 242.258153][T23717] loop0: detected capacity change from 0 to 4 [ 242.268089][T23717] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 242.322073][T23713] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 242.331528][T23715] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 242.356107][T23717] loop0: detected capacity change from 0 to 4 02:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 242.369501][T23717] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="420000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 242.461012][T23713] loop3: detected capacity change from 0 to 4 [ 242.467477][T23715] loop4: detected capacity change from 0 to 4 [ 242.487877][T23713] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 242.505994][T23715] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 242.532781][T23759] loop0: detected capacity change from 0 to 4 [ 242.542923][T23759] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 242.626280][T23759] loop0: detected capacity change from 0 to 4 [ 242.647881][T23759] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="020000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="410000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="430000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = accept$packet(r1, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x6, 0x8) sendfile(r2, r0, &(0x7f0000000040)=0x5, 0x101) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.227121][T23785] loop4: detected capacity change from 0 to 4 [ 243.238090][T23785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.238820][T23789] loop0: detected capacity change from 0 to 4 [ 243.254683][T23793] loop3: detected capacity change from 0 to 4 [ 243.285229][T23785] loop4: detected capacity change from 0 to 4 [ 243.291801][T23796] loop5: detected capacity change from 0 to 4 [ 243.300091][T23793] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.311732][T23789] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.321974][T23785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="030000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.331973][T23796] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.378318][T23789] loop0: detected capacity change from 0 to 4 [ 243.387701][T23789] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.415629][T23793] loop3: detected capacity change from 0 to 4 02:46:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="420000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="440000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.428504][T23832] loop5: detected capacity change from 0 to 4 [ 243.435861][T23793] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.453916][T23832] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.470873][T23841] loop4: detected capacity change from 0 to 4 02:46:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.492521][T23841] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.504530][T23844] loop0: detected capacity change from 0 to 4 [ 243.525594][T23844] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.535398][T23832] loop5: detected capacity change from 0 to 4 [ 243.546117][T23832] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.555655][T23858] loop3: detected capacity change from 0 to 4 [ 243.562128][T23841] loop4: detected capacity change from 0 to 4 [ 243.578532][T23844] loop0: detected capacity change from 0 to 4 02:46:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="040000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 243.578656][T23841] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.602740][T23858] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.618850][T23844] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.671353][T23882] loop5: detected capacity change from 0 to 4 [ 243.673367][T23858] loop3: detected capacity change from 0 to 4 [ 243.686184][T23858] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.703867][T23882] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 243.754526][T23882] loop5: detected capacity change from 0 to 4 [ 243.766569][T23882] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x4000, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r4, &(0x7f0000000640)='./file0\x00', 0x2800, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x101002, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_uid={'access', 0x3d, 0xee01}}, {@mmap='mmap'}, {@cachetag={'cachetag', 0x3d, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {@loose='loose'}, {@cachetag={'cachetag', 0x3d, '-\xba\xd3G\xb6:\xede\x04H\x81\xd3\xe8\x8e\x1f\xfb\xe6\x84w\xd0b\x06\xde\xf5l\xc3\xd2\xa3@^\x15\xdc^\xa9k\xbc\x90\x94\x00\xc8s\x86|\xc2m\b\x10\x0eU0\xa6\xfc::\xbc\x87M\xc5\x9f\x17\x86\xda\x18\xdf\x16e\x96|\x19\x0fL~\x8c~\xdeaO\x17^\xe2(\xe4\xf6\aR\x8d\x14}}\f\x90\xdd<\aX\x93d\xe9\v1\x8e\xa2\xf0\xe8!\x15\r>w+Qx\x88\xedJ\xa6\xb5\t,\x88\x1a\x16\x1d4\xeb\xae^\xf5\xd9\xa1\x99F\xee\xd6\xd7_\xaf\x14\xef\xc5\xa8\xe4\xbbS5tZ\x058\x1bp\x97\x8f \x8d\x8c\xde\x0eP\x1a\x97\xd3Y\xd3\xa7V\xcd\x01j6\x1di\x9c\t6\x15\x91\xc9\xba\xa4r\f\x1e\xd5\xc3\xb4jG3\xfc1\xbd3'}}, {@cache_loose='cache=loose'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsname={'fsname', 0x3d, 'cachetag'}}, {@permit_directio='permit_directio'}]}}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) preadv(r6, &(0x7f0000001380), 0x0, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002900)={0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f00000016c0)=""/185, &(0x7f0000001780)=0xb9) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x2, 0x1}) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}, {&(0x7f0000000080)=""/116, 0x74}], 0x2, 0x60a31f5b, 0xc64) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="430000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="450000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="100000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="050000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 244.223087][T23912] loop0: detected capacity change from 0 to 4 [ 244.227842][T23914] loop5: detected capacity change from 0 to 4 [ 244.229688][T23911] loop3: detected capacity change from 0 to 4 [ 244.242019][T23912] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.251625][T23919] loop4: detected capacity change from 0 to 4 [ 244.259462][T23911] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) listen(r1, 0x2000000) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001480)=""/214, 0xd6}], 0xd, 0x5, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x7fff, 0x3}, 0xc) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 244.271679][T23919] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.281223][T23914] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 244.333084][T23914] loop5: detected capacity change from 0 to 4 [ 244.339262][T23912] loop0: detected capacity change from 0 to 4 [ 244.345582][T23911] loop3: detected capacity change from 0 to 4 [ 244.354943][T23911] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.364670][T23914] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="060000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="130000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="440000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 244.380108][T23912] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.389892][T23919] loop4: detected capacity change from 0 to 4 [ 244.402845][T23919] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="460000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 244.487505][T23970] loop5: detected capacity change from 0 to 4 [ 244.522409][T23970] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.533756][T23972] loop3: detected capacity change from 0 to 4 [ 244.545569][T23979] loop0: detected capacity change from 0 to 4 [ 244.550241][T23972] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.565512][T23974] loop4: detected capacity change from 0 to 4 [ 244.571914][T23979] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 244.586045][T23972] loop3: detected capacity change from 0 to 4 [ 244.593472][T23974] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.601874][T23970] loop5: detected capacity change from 0 to 4 [ 244.659037][T23970] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.669559][T23979] loop0: detected capacity change from 0 to 4 [ 244.669585][T23974] loop4: detected capacity change from 0 to 4 [ 244.682865][T23972] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.692395][T23979] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="140000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 244.707311][T23974] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.798629][T24022] loop3: detected capacity change from 0 to 4 [ 244.845016][T24022] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 244.915503][T24022] loop3: detected capacity change from 0 to 4 [ 244.926793][T24022] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:46:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="470000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="070000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="450000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="150000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 245.191294][T24047] loop4: detected capacity change from 0 to 4 [ 245.197587][T24048] loop3: detected capacity change from 0 to 4 [ 245.201658][T24051] loop0: detected capacity change from 0 to 4 [ 245.213390][T24054] loop5: detected capacity change from 0 to 4 [ 245.220293][T24051] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.222807][T24048] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f00000000c0)=0x2, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x8, 0x4, 0x2, 0x4, 0x3, 0x3, 0x3f, 0x144, 0x38, 0x2f0, 0x9, 0x6, 0x20, 0x2, 0x401, 0x6, 0x81}, [{0x5, 0x8000, 0x2, 0x2, 0x0, 0x71, 0x1, 0x101}, {0x70000000, 0x0, 0x9b, 0x7, 0x81, 0x8, 0x1, 0xff}], "e7a7e814febadbdcb85585a96892a19f2d290da54064694fc2da8b1e7e657519279cf892d88424d236e58c00730968b651552b53dac2d41b9b3238fd1d46634f8853a26e147eccd526c33e926f44d94d66697c3350f61fc15991084bb6534f3cff407dddc7a250fb0e1450d8d1f8047e8873a4cf427e688eca5ab7412481b0a5606989831afb227dc26271e0c04ed529563db962f23ae50ab86a630f5d31381b134996eace541c4de909fd5a42da35658ed24f8221602ecb81d333f0d7c2ec059c5b0bd1fca2286c1cb4b7ce51e9419d914c6abc469c4cda1965bb43", [[], []]}, 0x354) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x46, 0x240280) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "35a44e60a62a429d", "8f9b4cd221bbab8da6b2cc762900000000000000c5de38d3a78f192c66dcfee2", "57196442", "b723c571a720c6d8"}, 0x38) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x8) 02:46:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="480000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 245.245824][T24047] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.260139][T24054] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.316754][T24047] loop4: detected capacity change from 0 to 4 [ 245.326966][T24047] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.335059][T24048] loop3: detected capacity change from 0 to 4 [ 245.349686][T24077] loop0: detected capacity change from 0 to 4 02:46:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="460000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 245.364345][T24054] loop5: detected capacity change from 0 to 4 [ 245.378476][T24048] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.388386][T24054] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.398900][T24088] loop4: detected capacity change from 0 to 4 [ 245.406191][T24077] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="160000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="080000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 245.429076][T24088] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.460960][T24077] loop0: detected capacity change from 0 to 4 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 245.497430][T24077] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.512388][T24088] loop4: detected capacity change from 0 to 4 [ 245.512388][T24109] loop5: detected capacity change from 0 to 4 [ 245.524761][T24112] loop3: detected capacity change from 0 to 4 02:46:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="490000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="470000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 245.573160][T24088] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.583813][T24112] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.592534][T24109] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:50 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 245.629173][T24112] loop3: detected capacity change from 0 to 4 [ 245.635948][T24112] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.646280][T24109] loop5: detected capacity change from 0 to 4 [ 245.653401][T24109] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.666944][T24138] loop0: detected capacity change from 0 to 4 02:46:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="170000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 245.699474][T24145] loop4: detected capacity change from 0 to 4 [ 245.721088][T24145] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.723874][T24138] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.767873][T24145] loop4: detected capacity change from 0 to 4 [ 245.776048][T24145] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.786798][T24158] loop3: detected capacity change from 0 to 4 [ 245.810659][T24158] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.814726][T24138] loop0: detected capacity change from 0 to 4 [ 245.829950][T24138] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 245.853557][T24158] loop3: detected capacity change from 0 to 4 [ 245.860338][T24158] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="090000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="480000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="180000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0xfffffeff000) fallocate(r3, 0x0, 0x0, 0x10000101) write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[], 0x38) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x280102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x5}, @mss={0x2, 0x81}], 0x2) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2c, &(0x7f0000000000)=0x1ff, 0x4) flistxattr(r0, &(0x7f0000000080)=""/144, 0x90) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') [ 246.237748][T24189] loop4: detected capacity change from 0 to 4 [ 246.241700][T24191] loop0: detected capacity change from 0 to 4 [ 246.255732][T24191] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.265768][T24200] loop5: detected capacity change from 0 to 4 [ 246.266307][T24194] loop3: detected capacity change from 0 to 4 [ 246.278846][T24189] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 246.291436][T24200] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.302624][T24194] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 246.334397][T24191] loop0: detected capacity change from 0 to 4 [ 246.340557][T24189] loop4: detected capacity change from 0 to 4 [ 246.348396][T24189] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.358647][T24191] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.362383][T24200] loop5: detected capacity change from 0 to 4 [ 246.374306][T24194] loop3: detected capacity change from 0 to 4 02:46:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="490000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 246.411357][T24194] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.420768][T24200] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="190000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 246.521323][T24238] loop0: detected capacity change from 0 to 4 [ 246.522705][T24240] loop4: detected capacity change from 0 to 4 [ 246.541350][T24238] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.560112][T24256] loop3: detected capacity change from 0 to 4 [ 246.595636][T24256] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.605364][T24240] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.622697][T24259] loop5: detected capacity change from 0 to 4 [ 246.625774][T24238] loop0: detected capacity change from 0 to 4 02:46:51 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 246.657824][T24256] loop3: detected capacity change from 0 to 4 [ 246.664720][T24259] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.677223][T24238] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.686676][T24240] loop4: detected capacity change from 0 to 4 [ 246.693316][T24240] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:51 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="004000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 246.713354][T24256] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.748341][T24259] loop5: detected capacity change from 0 to 4 02:46:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="1a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 246.759862][T24259] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.820171][T24300] loop4: detected capacity change from 0 to 4 [ 246.828655][T24298] loop0: detected capacity change from 0 to 4 [ 246.843915][T24305] loop3: detected capacity change from 0 to 4 [ 246.856740][T24305] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.874073][T24300] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.880176][T24298] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.899195][T24305] loop3: detected capacity change from 0 to 4 [ 246.906083][T24305] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 246.918236][T24300] loop4: detected capacity change from 0 to 4 [ 246.925108][T24300] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="1b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x200004, 0x18a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x302, 0x0, 0x0, 0x0, 0x0) [ 247.352490][T24335] loop3: detected capacity change from 0 to 4 [ 247.353274][T24336] loop5: detected capacity change from 0 to 4 [ 247.368492][T24336] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.378765][T24335] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.393434][T24344] loop0: detected capacity change from 0 to 4 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:46:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.404703][T24347] loop4: detected capacity change from 0 to 4 [ 247.419677][T24344] EXT4-fs (loop0): can't read group descriptor 0 [ 247.426798][T24347] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 247.459614][T24335] loop3: detected capacity change from 0 to 4 [ 247.466439][T24335] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:46:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="210000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.507616][T24376] loop5: detected capacity change from 0 to 4 [ 247.531177][T24376] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.542873][T24344] loop0: detected capacity change from 0 to 4 [ 247.549180][T24347] loop4: detected capacity change from 0 to 4 02:46:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="100000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.567466][T24344] EXT4-fs (loop0): can't read group descriptor 0 [ 247.574037][T24347] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.587648][T24376] loop5: detected capacity change from 0 to 4 [ 247.594483][T24395] loop3: detected capacity change from 0 to 4 02:46:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="640000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:52 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000a00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.616609][T24376] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.631338][T24395] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:52 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="0e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.666043][T24395] loop3: detected capacity change from 0 to 4 [ 247.682840][T24395] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="220000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 247.710533][T24405] loop2: detected capacity change from 0 to 4 [ 247.729582][T24417] loop4: detected capacity change from 0 to 4 [ 247.736032][T24405] EXT4-fs (loop2): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.751725][T24416] loop0: detected capacity change from 0 to 4 [ 247.757127][T24422] loop5: detected capacity change from 0 to 4 [ 247.767124][T24417] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.776525][T24422] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.795475][T24416] EXT4-fs (loop0): bad geometry: block count 10 exceeds size of device (1 blocks) [ 247.855079][T24417] loop4: detected capacity change from 0 to 4 [ 247.855183][T24437] loop3: detected capacity change from 0 to 4 [ 247.861754][T24422] loop5: detected capacity change from 0 to 4 [ 247.877002][T24417] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.890915][T24422] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.902503][T24437] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 247.918181][T24416] loop0: detected capacity change from 0 to 4 [ 247.925124][T24416] EXT4-fs (loop0): bad geometry: block count 10 exceeds size of device (1 blocks) [ 247.947553][T24437] loop3: detected capacity change from 0 to 4 [ 247.978360][T24437] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/182, 0xb6}, {&(0x7f00000000c0)=""/154, 0x9a}], 0x2, 0x3, 0x20009) 02:46:53 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffbffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="100000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="004000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000006400000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="230000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 248.236759][T24475] loop0: detected capacity change from 0 to 4 [ 248.243178][T24478] loop4: detected capacity change from 0 to 4 [ 248.243699][T24481] loop3: detected capacity change from 0 to 4 [ 248.258771][T24475] EXT4-fs (loop0): bad geometry: block count 100 exceeds size of device (1 blocks) [ 248.258843][T24476] loop2: detected capacity change from 0 to 264192 [ 248.276106][T24482] loop5: detected capacity change from 0 to 4 [ 248.286827][T24482] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.297863][T24478] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.309163][T24481] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.323251][T24476] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 02:46:53 executing program 2 (fault-call:7 fault-nth:0): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 248.333046][T24476] EXT4-fs (loop2): group descriptors corrupted! [ 248.346682][T24475] loop0: detected capacity change from 0 to 4 [ 248.361237][T24475] EXT4-fs (loop0): bad geometry: block count 100 exceeds size of device (1 blocks) 02:46:53 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 248.406102][T24478] loop4: detected capacity change from 0 to 4 [ 248.412387][T24482] loop5: detected capacity change from 0 to 4 [ 248.424418][T24481] loop3: detected capacity change from 0 to 4 [ 248.430883][T24482] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.453517][T24520] FAULT_INJECTION: forcing a failure. [ 248.453517][T24520] name failslab, interval 1, probability 0, space 0, times 0 [ 248.466183][T24520] CPU: 1 PID: 24520 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 248.474945][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.485106][T24520] Call Trace: [ 248.488763][T24520] dump_stack+0x137/0x19d [ 248.493710][T24520] should_fail+0x23c/0x250 [ 248.498108][T24520] __should_failslab+0x81/0x90 [ 248.502855][T24520] should_failslab+0x5/0x20 [ 248.507436][T24520] kmem_cache_alloc_bulk+0x40/0x380 [ 248.512630][T24520] io_submit_sqes+0x515/0xaf0 [ 248.517292][T24520] __se_sys_io_uring_enter+0x217/0xb20 [ 248.523375][T24520] ? fput+0x2d/0x130 [ 248.527264][T24520] __x64_sys_io_uring_enter+0x74/0x80 [ 248.532623][T24520] do_syscall_64+0x34/0x50 [ 248.537034][T24520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.542921][T24520] RIP: 0033:0x466459 [ 248.546801][T24520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.566474][T24520] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 248.574882][T24520] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 248.583556][T24520] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 248.591652][T24520] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:46:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="130000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 248.599726][T24520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.607694][T24520] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 248.628540][T24481] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.638774][T24478] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:53 executing program 2 (fault-call:7 fault-nth:1): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="240000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 248.661538][T24522] loop0: detected capacity change from 0 to 4 [ 248.703993][T24530] loop5: detected capacity change from 0 to 4 [ 248.713993][T24530] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.742828][T24522] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.747570][T24539] FAULT_INJECTION: forcing a failure. [ 248.747570][T24539] name failslab, interval 1, probability 0, space 0, times 0 [ 248.765054][T24539] CPU: 1 PID: 24539 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 248.773855][T24539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.783922][T24539] Call Trace: [ 248.787212][T24539] dump_stack+0x137/0x19d [ 248.791045][T24543] loop4: detected capacity change from 0 to 4 [ 248.791541][T24539] should_fail+0x23c/0x250 [ 248.791559][T24539] __should_failslab+0x81/0x90 [ 248.806768][T24539] ? io_req_defer_prep+0xd9/0x440 [ 248.811969][T24539] should_failslab+0x5/0x20 [ 248.816483][T24539] __kmalloc+0x66/0x360 [ 248.820661][T24539] ? mntput+0x45/0x70 [ 248.824720][T24539] io_req_defer_prep+0xd9/0x440 [ 248.829896][T24539] io_req_defer+0x157/0x470 [ 248.834441][T24539] io_queue_sqe+0x18/0x160 [ 248.838839][T24539] io_submit_sqe+0x15c7/0x30c0 [ 248.843673][T24539] ? kmem_cache_alloc_bulk+0x239/0x380 [ 248.849220][T24539] io_submit_sqes+0x61f/0xaf0 [ 248.853968][T24539] __se_sys_io_uring_enter+0x217/0xb20 [ 248.859491][T24539] ? fput+0x2d/0x130 [ 248.863383][T24539] __x64_sys_io_uring_enter+0x74/0x80 [ 248.868810][T24539] do_syscall_64+0x34/0x50 [ 248.873262][T24539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 248.879146][T24539] RIP: 0033:0x466459 [ 248.883020][T24539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.902667][T24539] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 248.911077][T24539] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 248.919045][T24539] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 248.927084][T24539] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 248.935036][T24539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.942999][T24539] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 248.953166][T24546] loop3: detected capacity change from 0 to 4 [ 248.961392][T24543] EXT4-fs (loop4): can't read group descriptor 0 [ 248.974741][T24522] loop0: detected capacity change from 0 to 4 [ 248.986466][T24522] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 248.991835][T24530] loop5: detected capacity change from 0 to 4 02:46:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = fork() tkill(r1, 0x31) r2 = syz_open_procfs(r1, &(0x7f0000000040)='sessionid\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:46:54 executing program 2 (fault-call:7 fault-nth:2): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.006181][T24546] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.021216][T24543] loop4: detected capacity change from 0 to 4 [ 249.028463][T24530] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.041445][T24543] EXT4-fs (loop4): can't read group descriptor 0 [ 249.048652][T24546] loop3: detected capacity change from 0 to 4 02:46:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="140000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000a00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.101930][T24546] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.124965][T24573] loop0: detected capacity change from 0 to 4 [ 249.128183][T24579] FAULT_INJECTION: forcing a failure. [ 249.128183][T24579] name failslab, interval 1, probability 0, space 0, times 0 [ 249.144010][T24579] CPU: 0 PID: 24579 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 249.152773][T24579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.162821][T24579] Call Trace: [ 249.166103][T24579] dump_stack+0x137/0x19d [ 249.170555][T24579] should_fail+0x23c/0x250 [ 249.175034][T24579] __should_failslab+0x81/0x90 [ 249.179814][T24579] ? io_req_defer+0x19c/0x470 [ 249.184485][T24579] should_failslab+0x5/0x20 [ 249.188971][T24579] kmem_cache_alloc_trace+0x49/0x320 [ 249.194237][T24579] ? io_req_defer_prep+0x218/0x440 [ 249.199341][T24579] io_req_defer+0x19c/0x470 [ 249.203864][T24579] io_queue_sqe+0x18/0x160 [ 249.208900][T24579] io_submit_sqe+0x15c7/0x30c0 [ 249.214299][T24579] ? kmem_cache_alloc_bulk+0x239/0x380 [ 249.219840][T24579] io_submit_sqes+0x61f/0xaf0 [ 249.224536][T24579] __se_sys_io_uring_enter+0x217/0xb20 [ 249.230049][T24579] ? fput+0x2d/0x130 [ 249.233941][T24579] __x64_sys_io_uring_enter+0x74/0x80 [ 249.239305][T24579] do_syscall_64+0x34/0x50 [ 249.243723][T24579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.249693][T24579] RIP: 0033:0x466459 [ 249.253654][T24579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 249.273269][T24579] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 249.281667][T24579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 249.289704][T24579] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 249.297656][T24579] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.305616][T24579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.313719][T24579] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="250000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.351022][T24573] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:54 executing program 2 (fault-call:7 fault-nth:3): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 249.393615][T24594] loop5: detected capacity change from 0 to 4 [ 249.396441][T24595] loop3: detected capacity change from 0 to 4 [ 249.400824][T24596] loop4: detected capacity change from 0 to 4 [ 249.416769][T24595] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.438794][T24609] FAULT_INJECTION: forcing a failure. [ 249.438794][T24609] name failslab, interval 1, probability 0, space 0, times 0 [ 249.451563][T24609] CPU: 1 PID: 24609 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 249.460330][T24609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.470579][T24609] Call Trace: [ 249.474024][T24609] dump_stack+0x137/0x19d [ 249.478362][T24609] should_fail+0x23c/0x250 [ 249.482845][T24609] __should_failslab+0x81/0x90 [ 249.488068][T24609] ? io_req_defer_prep+0xd9/0x440 [ 249.501162][T24609] should_failslab+0x5/0x20 [ 249.505662][T24609] __kmalloc+0x66/0x360 [ 249.509807][T24609] io_req_defer_prep+0xd9/0x440 [ 249.514643][T24609] io_req_defer+0x157/0x470 [ 249.519649][T24609] io_queue_sqe+0x18/0x160 [ 249.524062][T24609] io_submit_sqe+0x15c7/0x30c0 [ 249.528884][T24609] ? kmem_cache_alloc_bulk+0x239/0x380 [ 249.534565][T24609] io_submit_sqes+0x61f/0xaf0 [ 249.539705][T24609] __se_sys_io_uring_enter+0x217/0xb20 [ 249.545217][T24609] ? fput+0x2d/0x130 [ 249.549705][T24609] __x64_sys_io_uring_enter+0x74/0x80 [ 249.555441][T24609] do_syscall_64+0x34/0x50 [ 249.560195][T24609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.567032][T24609] RIP: 0033:0x466459 [ 249.571256][T24609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:46:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.593368][T24609] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 249.601851][T24609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 249.609897][T24609] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 249.618785][T24609] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.629940][T24609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.639282][T24609] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:54 executing program 2 (fault-call:7 fault-nth:4): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 249.664124][T24596] EXT4-fs (loop4): bad geometry: block count 10 exceeds size of device (1 blocks) [ 249.674160][T24594] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="260000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.708596][T24595] loop3: detected capacity change from 0 to 4 [ 249.721100][T24595] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.732802][T24596] loop4: detected capacity change from 0 to 4 [ 249.739107][T24615] loop0: detected capacity change from 0 to 4 [ 249.747190][T24596] EXT4-fs (loop4): bad geometry: block count 10 exceeds size of device (1 blocks) 02:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="150000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 249.759638][T24615] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 249.767177][T24627] FAULT_INJECTION: forcing a failure. [ 249.767177][T24627] name failslab, interval 1, probability 0, space 0, times 0 [ 249.781914][T24627] CPU: 0 PID: 24627 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 249.790673][T24627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.800813][T24627] Call Trace: [ 249.804168][T24627] dump_stack+0x137/0x19d [ 249.808485][T24627] should_fail+0x23c/0x250 [ 249.812883][T24627] __should_failslab+0x81/0x90 [ 249.817635][T24627] ? io_req_defer+0x19c/0x470 [ 249.822422][T24627] should_failslab+0x5/0x20 [ 249.826926][T24627] kmem_cache_alloc_trace+0x49/0x320 [ 249.832273][T24627] ? io_req_defer_prep+0x218/0x440 [ 249.837420][T24627] io_req_defer+0x19c/0x470 [ 249.841982][T24627] io_queue_sqe+0x18/0x160 [ 249.846398][T24627] io_submit_sqe+0x15c7/0x30c0 [ 249.851242][T24627] ? kmem_cache_alloc_bulk+0x239/0x380 [ 249.856694][T24627] io_submit_sqes+0x61f/0xaf0 [ 249.861365][T24627] __se_sys_io_uring_enter+0x217/0xb20 [ 249.866805][T24627] ? fput+0x2d/0x130 [ 249.870780][T24627] __x64_sys_io_uring_enter+0x74/0x80 [ 249.876177][T24627] do_syscall_64+0x34/0x50 [ 249.880628][T24627] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 249.886907][T24627] RIP: 0033:0x466459 [ 249.890788][T24627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:46:55 executing program 2 (fault-call:7 fault-nth:5): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 249.910383][T24627] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 249.918788][T24627] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 249.926760][T24627] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 249.934740][T24627] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 249.942703][T24627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.950653][T24627] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 250.015350][T24615] loop0: detected capacity change from 0 to 4 [ 250.033625][T24615] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.049129][T24645] FAULT_INJECTION: forcing a failure. [ 250.049129][T24645] name failslab, interval 1, probability 0, space 0, times 0 [ 250.061924][T24645] CPU: 0 PID: 24645 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 250.062034][T24642] loop5: detected capacity change from 0 to 4 [ 250.071576][T24645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.071592][T24645] Call Trace: [ 250.071599][T24645] dump_stack+0x137/0x19d [ 250.077947][T24643] loop3: detected capacity change from 0 to 4 [ 250.087878][T24645] should_fail+0x23c/0x250 [ 250.087903][T24645] __should_failslab+0x81/0x90 [ 250.110719][T24645] ? io_req_defer_prep+0xd9/0x440 [ 250.115751][T24645] should_failslab+0x5/0x20 [ 250.120334][T24645] __kmalloc+0x66/0x360 [ 250.124529][T24645] io_req_defer_prep+0xd9/0x440 [ 250.129451][T24645] io_req_defer+0x157/0x470 [ 250.134010][T24645] io_queue_sqe+0x18/0x160 [ 250.138508][T24645] io_submit_sqe+0x15c7/0x30c0 [ 250.143283][T24645] ? kmem_cache_alloc_bulk+0x239/0x380 [ 250.148732][T24645] io_submit_sqes+0x61f/0xaf0 [ 250.153440][T24645] __se_sys_io_uring_enter+0x217/0xb20 [ 250.159035][T24645] ? fput+0x2d/0x130 [ 250.162926][T24645] __x64_sys_io_uring_enter+0x74/0x80 [ 250.168285][T24645] do_syscall_64+0x34/0x50 [ 250.172776][T24645] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.178681][T24645] RIP: 0033:0x466459 [ 250.182573][T24645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.203041][T24645] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:46:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) dup2(0xffffffffffffffff, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x4000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x100, 0x0) dup2(r2, r3) 02:46:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000006400000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 250.211446][T24645] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 250.219487][T24645] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 250.227545][T24645] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.235502][T24645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.243454][T24645] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 250.268239][T24642] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.303772][T24643] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.313390][T24663] loop4: detected capacity change from 0 to 4 [ 250.316805][T24666] loop0: detected capacity change from 0 to 4 [ 250.325861][T24663] EXT4-fs (loop4): bad geometry: block count 100 exceeds size of device (1 blocks) [ 250.335408][T24666] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.360227][T24642] loop5: detected capacity change from 0 to 4 02:46:55 executing program 2 (fault-call:7 fault-nth:6): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 250.368291][T24642] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.399326][T24643] loop3: detected capacity change from 0 to 4 [ 250.400932][T24683] FAULT_INJECTION: forcing a failure. [ 250.400932][T24683] name failslab, interval 1, probability 0, space 0, times 0 [ 250.418088][T24683] CPU: 0 PID: 24683 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 250.420457][T24643] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.427114][T24683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.427130][T24683] Call Trace: [ 250.427137][T24683] dump_stack+0x137/0x19d [ 250.455830][T24683] should_fail+0x23c/0x250 [ 250.460561][T24683] __should_failslab+0x81/0x90 [ 250.465366][T24683] ? io_req_defer+0x19c/0x470 [ 250.470043][T24683] should_failslab+0x5/0x20 [ 250.474890][T24683] kmem_cache_alloc_trace+0x49/0x320 [ 250.480618][T24683] ? io_req_defer_prep+0x218/0x440 [ 250.485749][T24683] io_req_defer+0x19c/0x470 [ 250.490248][T24683] io_queue_sqe+0x18/0x160 [ 250.494733][T24683] io_submit_sqe+0x15c7/0x30c0 [ 250.499593][T24683] ? kmem_cache_alloc_bulk+0x239/0x380 [ 250.505038][T24683] io_submit_sqes+0x61f/0xaf0 [ 250.509703][T24683] __se_sys_io_uring_enter+0x217/0xb20 [ 250.515179][T24683] ? fput+0x2d/0x130 [ 250.519136][T24683] __x64_sys_io_uring_enter+0x74/0x80 [ 250.524490][T24683] do_syscall_64+0x34/0x50 [ 250.528914][T24683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.534808][T24683] RIP: 0033:0x466459 [ 250.540386][T24683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.560086][T24683] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 250.568585][T24683] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 250.576557][T24683] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 250.584513][T24683] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.592578][T24683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.601084][T24683] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:55 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="160000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:55 executing program 2 (fault-call:7 fault-nth:7): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="290000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 250.620533][T24666] loop0: detected capacity change from 0 to 4 [ 250.636660][T24663] loop4: detected capacity change from 0 to 4 [ 250.653903][T24666] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:55 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200600008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 250.668830][T24663] EXT4-fs (loop4): bad geometry: block count 100 exceeds size of device (1 blocks) [ 250.680964][T24701] loop5: detected capacity change from 0 to 4 [ 250.702026][T24701] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.705984][T24703] loop3: detected capacity change from 0 to 4 02:46:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 250.719856][T24709] FAULT_INJECTION: forcing a failure. [ 250.719856][T24709] name failslab, interval 1, probability 0, space 0, times 0 [ 250.732533][T24709] CPU: 1 PID: 24709 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 250.741302][T24709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.751374][T24709] Call Trace: [ 250.754649][T24709] dump_stack+0x137/0x19d [ 250.758987][T24709] should_fail+0x23c/0x250 [ 250.763409][T24709] __should_failslab+0x81/0x90 [ 250.768177][T24709] ? io_req_defer_prep+0xd9/0x440 [ 250.773260][T24709] should_failslab+0x5/0x20 [ 250.777762][T24709] __kmalloc+0x66/0x360 [ 250.781897][T24709] io_req_defer_prep+0xd9/0x440 [ 250.786743][T24709] io_req_defer+0x157/0x470 [ 250.791292][T24709] io_queue_sqe+0x18/0x160 [ 250.795719][T24709] io_submit_sqe+0x15c7/0x30c0 [ 250.800474][T24709] ? kmem_cache_alloc_bulk+0x239/0x380 [ 250.805912][T24709] io_submit_sqes+0x61f/0xaf0 [ 250.810574][T24709] __se_sys_io_uring_enter+0x217/0xb20 [ 250.816072][T24709] ? fput+0x2d/0x130 [ 250.820028][T24709] __x64_sys_io_uring_enter+0x74/0x80 [ 250.825391][T24709] do_syscall_64+0x34/0x50 [ 250.829789][T24709] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 250.835692][T24709] RIP: 0033:0x466459 [ 250.843918][T24709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 250.863546][T24709] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 250.871945][T24709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 250.879921][T24709] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 250.887885][T24709] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 250.895846][T24709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.903805][T24709] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:56 executing program 2 (fault-call:7 fault-nth:8): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 250.934862][T24703] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 250.934909][T24717] loop0: detected capacity change from 0 to 4 [ 250.955309][T24701] loop5: detected capacity change from 0 to 4 [ 250.988922][T24731] FAULT_INJECTION: forcing a failure. [ 250.988922][T24731] name failslab, interval 1, probability 0, space 0, times 0 [ 251.001589][T24731] CPU: 1 PID: 24731 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 251.010351][T24731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.015688][T24701] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.020390][T24731] Call Trace: [ 251.020399][T24731] dump_stack+0x137/0x19d [ 251.020422][T24731] should_fail+0x23c/0x250 [ 251.030016][T24717] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.032959][T24731] __should_failslab+0x81/0x90 [ 251.032983][T24731] ? io_req_defer+0x19c/0x470 [ 251.039401][T24724] loop4: detected capacity change from 0 to 4 [ 251.041802][T24731] should_failslab+0x5/0x20 [ 251.051699][T24703] loop3: detected capacity change from 0 to 4 [ 251.056366][T24731] kmem_cache_alloc_trace+0x49/0x320 [ 251.056391][T24731] ? io_req_defer_prep+0x218/0x440 [ 251.070499][T24703] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.071586][T24731] io_req_defer+0x19c/0x470 [ 251.095900][T24724] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.097456][T24731] io_queue_sqe+0x18/0x160 [ 251.115649][T24731] io_submit_sqe+0x15c7/0x30c0 [ 251.115681][T24731] ? kmem_cache_alloc_bulk+0x239/0x380 [ 251.125866][T24731] io_submit_sqes+0x61f/0xaf0 [ 251.130649][T24731] __se_sys_io_uring_enter+0x217/0xb20 02:46:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x1c1c2000) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x80000000, 0x10000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@private0}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xaecedaf51718246f) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 251.136179][T24731] ? fput+0x2d/0x130 [ 251.140077][T24731] __x64_sys_io_uring_enter+0x74/0x80 [ 251.145463][T24731] do_syscall_64+0x34/0x50 [ 251.150862][T24731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.156764][T24731] RIP: 0033:0x466459 [ 251.160652][T24731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.180959][T24731] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:46:56 executing program 2 (fault-call:7 fault-nth:9): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="170000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 251.189455][T24731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 251.197531][T24731] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 251.205668][T24731] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.213724][T24731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.221705][T24731] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 251.271903][T24717] loop0: detected capacity change from 0 to 4 [ 251.278248][T24724] loop4: detected capacity change from 0 to 4 [ 251.285744][T24717] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.298148][T24724] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.308526][T24753] FAULT_INJECTION: forcing a failure. [ 251.308526][T24753] name failslab, interval 1, probability 0, space 0, times 0 [ 251.321215][T24753] CPU: 1 PID: 24753 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 251.329970][T24753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.340034][T24753] Call Trace: [ 251.343305][T24753] dump_stack+0x137/0x19d [ 251.347645][T24753] should_fail+0x23c/0x250 [ 251.352045][T24753] __should_failslab+0x81/0x90 [ 251.356824][T24753] ? io_req_defer_prep+0xd9/0x440 [ 251.361916][T24753] should_failslab+0x5/0x20 [ 251.366836][T24753] __kmalloc+0x66/0x360 [ 251.370975][T24753] io_req_defer_prep+0xd9/0x440 [ 251.375809][T24753] io_req_defer+0x157/0x470 [ 251.380386][T24753] io_queue_sqe+0x18/0x160 [ 251.384802][T24753] io_submit_sqe+0x15c7/0x30c0 [ 251.389661][T24753] ? kmem_cache_alloc_bulk+0x239/0x380 [ 251.395169][T24753] io_submit_sqes+0x61f/0xaf0 [ 251.399880][T24753] __se_sys_io_uring_enter+0x217/0xb20 [ 251.405322][T24753] ? fput+0x2d/0x130 [ 251.409209][T24753] __x64_sys_io_uring_enter+0x74/0x80 [ 251.414761][T24753] do_syscall_64+0x34/0x50 [ 251.419190][T24753] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.425120][T24753] RIP: 0033:0x466459 [ 251.429003][T24753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.448606][T24753] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 251.457016][T24753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 251.465049][T24753] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:46:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 251.473010][T24753] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.480981][T24753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.488932][T24753] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200700008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:56 executing program 2 (fault-call:7 fault-nth:10): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 251.517563][T24760] loop5: detected capacity change from 0 to 4 [ 251.533249][T24760] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.564353][T24770] loop3: detected capacity change from 0 to 4 [ 251.570622][T24771] loop0: detected capacity change from 0 to 4 [ 251.576230][T24776] FAULT_INJECTION: forcing a failure. [ 251.576230][T24776] name failslab, interval 1, probability 0, space 0, times 0 [ 251.589744][T24776] CPU: 1 PID: 24776 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 251.601099][T24776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.611330][T24776] Call Trace: [ 251.614591][T24776] dump_stack+0x137/0x19d [ 251.618905][T24776] should_fail+0x23c/0x250 [ 251.623329][T24776] __should_failslab+0x81/0x90 [ 251.628074][T24776] ? io_req_defer+0x19c/0x470 [ 251.632794][T24776] should_failslab+0x5/0x20 [ 251.637287][T24776] kmem_cache_alloc_trace+0x49/0x320 [ 251.642580][T24776] ? io_req_defer_prep+0x218/0x440 [ 251.647694][T24776] io_req_defer+0x19c/0x470 [ 251.652186][T24776] io_queue_sqe+0x18/0x160 [ 251.656603][T24776] io_submit_sqe+0x15c7/0x30c0 [ 251.661369][T24776] ? kmem_cache_alloc_bulk+0x239/0x380 [ 251.666980][T24776] io_submit_sqes+0x61f/0xaf0 [ 251.671765][T24776] __se_sys_io_uring_enter+0x217/0xb20 [ 251.677239][T24776] ? fput+0x2d/0x130 [ 251.681188][T24776] __x64_sys_io_uring_enter+0x74/0x80 [ 251.686660][T24776] do_syscall_64+0x34/0x50 [ 251.691088][T24776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.696982][T24776] RIP: 0033:0x466459 [ 251.700902][T24776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.720772][T24776] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 251.729189][T24776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 251.737231][T24776] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 251.745189][T24776] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 251.753219][T24776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:46:57 executing program 2 (fault-call:7 fault-nth:11): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 251.761311][T24776] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 251.783721][T24770] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.807114][T24771] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.811889][T24760] loop5: detected capacity change from 0 to 4 [ 251.823769][T24760] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 251.839410][T24789] FAULT_INJECTION: forcing a failure. [ 251.839410][T24789] name failslab, interval 1, probability 0, space 0, times 0 [ 251.842946][T24785] loop4: detected capacity change from 0 to 4 [ 251.852270][T24789] CPU: 0 PID: 24789 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 251.867105][T24789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.877154][T24789] Call Trace: [ 251.880469][T24789] dump_stack+0x137/0x19d [ 251.884799][T24789] should_fail+0x23c/0x250 [ 251.889282][T24789] __should_failslab+0x81/0x90 [ 251.894033][T24789] ? io_req_defer_prep+0xd9/0x440 [ 251.899047][T24789] should_failslab+0x5/0x20 [ 251.903534][T24789] __kmalloc+0x66/0x360 [ 251.907846][T24789] io_req_defer_prep+0xd9/0x440 [ 251.912686][T24789] io_req_defer+0x157/0x470 [ 251.917203][T24789] io_queue_sqe+0x18/0x160 [ 251.921732][T24789] io_submit_sqe+0x15c7/0x30c0 [ 251.926485][T24789] ? kmem_cache_alloc_bulk+0x239/0x380 [ 251.931936][T24789] io_submit_sqes+0x61f/0xaf0 [ 251.936633][T24789] __se_sys_io_uring_enter+0x217/0xb20 [ 251.942189][T24789] ? fput+0x2d/0x130 [ 251.946115][T24789] __x64_sys_io_uring_enter+0x74/0x80 [ 251.951555][T24789] do_syscall_64+0x34/0x50 [ 251.955955][T24789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 251.961917][T24789] RIP: 0033:0x466459 [ 251.965823][T24789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 251.985534][T24789] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 251.993995][T24789] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 252.001965][T24789] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:46:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:57 executing program 2 (fault-call:7 fault-nth:12): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 252.009981][T24789] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.017961][T24789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.025914][T24789] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 252.052820][T24785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.075860][T24771] loop0: detected capacity change from 0 to 4 [ 252.082448][T24771] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.087833][T24803] FAULT_INJECTION: forcing a failure. [ 252.087833][T24803] name failslab, interval 1, probability 0, space 0, times 0 [ 252.098622][T24801] loop3: detected capacity change from 0 to 4 [ 252.104550][T24803] CPU: 0 PID: 24803 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 252.119319][T24803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.129415][T24803] Call Trace: [ 252.132684][T24803] dump_stack+0x137/0x19d [ 252.137017][T24803] should_fail+0x23c/0x250 [ 252.141467][T24803] __should_failslab+0x81/0x90 [ 252.146218][T24803] ? io_req_defer+0x19c/0x470 [ 252.150957][T24803] should_failslab+0x5/0x20 [ 252.155537][T24803] kmem_cache_alloc_trace+0x49/0x320 [ 252.161087][T24803] ? io_req_defer_prep+0x218/0x440 [ 252.166226][T24803] io_req_defer+0x19c/0x470 [ 252.170713][T24803] io_queue_sqe+0x18/0x160 [ 252.175112][T24803] io_submit_sqe+0x15c7/0x30c0 [ 252.179872][T24803] ? kmem_cache_alloc_bulk+0x239/0x380 [ 252.185311][T24803] io_submit_sqes+0x61f/0xaf0 [ 252.190026][T24803] __se_sys_io_uring_enter+0x217/0xb20 [ 252.195469][T24803] ? fput+0x2d/0x130 [ 252.199359][T24803] __x64_sys_io_uring_enter+0x74/0x80 [ 252.204765][T24803] do_syscall_64+0x34/0x50 [ 252.209165][T24803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.215084][T24803] RIP: 0033:0x466459 [ 252.218967][T24803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.238687][T24803] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 252.247131][T24803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 252.255139][T24803] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 252.263159][T24803] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:46:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="180000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:57 executing program 2 (fault-call:7 fault-nth:13): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x81, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 252.271113][T24803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.279064][T24803] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 252.303506][T24801] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.329881][T24810] FAULT_INJECTION: forcing a failure. [ 252.329881][T24810] name failslab, interval 1, probability 0, space 0, times 0 [ 252.343638][T24810] CPU: 1 PID: 24810 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 252.352455][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.362506][T24810] Call Trace: [ 252.365776][T24810] dump_stack+0x137/0x19d [ 252.370102][T24810] should_fail+0x23c/0x250 [ 252.374579][T24810] __should_failslab+0x81/0x90 [ 252.379329][T24810] ? io_req_defer_prep+0xd9/0x440 [ 252.384521][T24810] should_failslab+0x5/0x20 [ 252.389026][T24810] __kmalloc+0x66/0x360 [ 252.393231][T24810] io_req_defer_prep+0xd9/0x440 [ 252.398064][T24810] io_req_defer+0x157/0x470 [ 252.402582][T24810] io_queue_sqe+0x18/0x160 [ 252.406979][T24810] io_submit_sqe+0x15c7/0x30c0 [ 252.411726][T24810] ? kmem_cache_alloc_bulk+0x239/0x380 [ 252.417206][T24810] io_submit_sqes+0x61f/0xaf0 [ 252.421906][T24810] __se_sys_io_uring_enter+0x217/0xb20 [ 252.427464][T24810] ? fput+0x2d/0x130 [ 252.431381][T24810] __x64_sys_io_uring_enter+0x74/0x80 [ 252.436743][T24810] do_syscall_64+0x34/0x50 [ 252.441142][T24810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.447021][T24810] RIP: 0033:0x466459 [ 252.450901][T24810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.470489][T24810] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:46:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:57 executing program 2 (fault-call:7 fault-nth:14): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 252.478899][T24810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 252.486857][T24810] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 252.494907][T24810] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.502859][T24810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.510820][T24810] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 252.576248][T24785] loop4: detected capacity change from 0 to 4 [ 252.589143][T24785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.590626][T24801] loop3: detected capacity change from 0 to 4 [ 252.605454][T24826] loop5: detected capacity change from 0 to 4 [ 252.615865][T24826] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.628315][T24801] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.639873][T24832] FAULT_INJECTION: forcing a failure. [ 252.639873][T24832] name failslab, interval 1, probability 0, space 0, times 0 [ 252.652619][T24832] CPU: 0 PID: 24832 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 252.661728][T24832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.672265][T24832] Call Trace: [ 252.675551][T24832] dump_stack+0x137/0x19d [ 252.679887][T24832] should_fail+0x23c/0x250 [ 252.684408][T24832] __should_failslab+0x81/0x90 [ 252.689366][T24832] ? io_req_defer+0x19c/0x470 [ 252.694569][T24832] should_failslab+0x5/0x20 [ 252.699168][T24832] kmem_cache_alloc_trace+0x49/0x320 [ 252.710749][T24832] ? io_req_defer_prep+0x218/0x440 [ 252.716225][T24832] io_req_defer+0x19c/0x470 [ 252.720817][T24832] io_queue_sqe+0x18/0x160 [ 252.725447][T24832] io_submit_sqe+0x15c7/0x30c0 [ 252.731346][T24832] ? kmem_cache_alloc_bulk+0x239/0x380 [ 252.738295][T24832] io_submit_sqes+0x61f/0xaf0 [ 252.743589][T24832] __se_sys_io_uring_enter+0x217/0xb20 [ 252.749492][T24832] ? fput+0x2d/0x130 [ 252.753460][T24832] __x64_sys_io_uring_enter+0x74/0x80 [ 252.759239][T24832] do_syscall_64+0x34/0x50 [ 252.763662][T24832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 252.770522][T24832] RIP: 0033:0x466459 [ 252.774584][T24832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 252.794497][T24832] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 252.804258][T24832] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 252.813851][T24832] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 252.821984][T24832] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 252.830230][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.838240][T24832] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 252.858718][T24830] loop0: detected capacity change from 0 to 4 02:46:58 executing program 2 (fault-call:7 fault-nth:15): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="320000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 252.873771][T24826] loop5: detected capacity change from 0 to 4 [ 252.883734][T24830] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.893564][T24826] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.913703][T24844] loop4: detected capacity change from 0 to 4 [ 252.919165][T24846] FAULT_INJECTION: forcing a failure. [ 252.919165][T24846] name failslab, interval 1, probability 0, space 0, times 0 [ 252.932579][T24846] CPU: 1 PID: 24846 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 252.941352][T24846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.945806][T24844] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 252.951733][T24846] Call Trace: [ 252.951743][T24846] dump_stack+0x137/0x19d [ 252.951766][T24846] should_fail+0x23c/0x250 [ 252.973917][T24846] __should_failslab+0x81/0x90 [ 252.978707][T24846] should_failslab+0x5/0x20 [ 252.983302][T24846] kmem_cache_alloc_bulk+0x40/0x380 [ 252.988490][T24846] io_submit_sqes+0x515/0xaf0 [ 252.993214][T24846] __se_sys_io_uring_enter+0x217/0xb20 [ 252.998686][T24846] ? fput+0x2d/0x130 [ 253.002640][T24846] __x64_sys_io_uring_enter+0x74/0x80 [ 253.008183][T24846] do_syscall_64+0x34/0x50 [ 253.012598][T24846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.018570][T24846] RIP: 0033:0x466459 [ 253.022626][T24846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 253.042924][T24846] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.051336][T24846] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 253.059315][T24846] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 253.067293][T24846] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:46:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="190000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:46:58 executing program 2 (fault-call:7 fault-nth:16): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 253.075431][T24846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.083403][T24846] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 253.163052][T24830] loop0: detected capacity change from 0 to 4 [ 253.167170][T24863] FAULT_INJECTION: forcing a failure. [ 253.167170][T24863] name failslab, interval 1, probability 0, space 0, times 0 [ 253.169276][T24844] loop4: detected capacity change from 0 to 4 [ 253.181957][T24863] CPU: 1 PID: 24863 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 253.181980][T24863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.181989][T24863] Call Trace: [ 253.181996][T24863] dump_stack+0x137/0x19d [ 253.215544][T24863] should_fail+0x23c/0x250 [ 253.219948][T24863] __should_failslab+0x81/0x90 [ 253.224766][T24863] ? io_req_defer_prep+0xd9/0x440 [ 253.230041][T24863] should_failslab+0x5/0x20 [ 253.234704][T24863] __kmalloc+0x66/0x360 [ 253.238861][T24863] io_req_defer_prep+0xd9/0x440 [ 253.243984][T24863] io_req_defer+0x157/0x470 [ 253.248687][T24863] io_queue_sqe+0x18/0x160 [ 253.253157][T24863] io_submit_sqe+0x15c7/0x30c0 [ 253.257938][T24863] ? kmem_cache_alloc_bulk+0x239/0x380 [ 253.263391][T24863] io_submit_sqes+0x61f/0xaf0 [ 253.268316][T24863] __se_sys_io_uring_enter+0x217/0xb20 [ 253.273948][T24863] ? fput+0x2d/0x130 [ 253.277842][T24863] __x64_sys_io_uring_enter+0x74/0x80 [ 253.283296][T24863] do_syscall_64+0x34/0x50 [ 253.287753][T24863] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.293890][T24863] RIP: 0033:0x466459 [ 253.297863][T24863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 253.318264][T24863] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.326758][T24863] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 253.334724][T24863] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 253.342678][T24863] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.350632][T24863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:46:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 253.358593][T24863] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 253.377909][T24862] loop3: detected capacity change from 0 to 4 [ 253.388590][T24864] loop5: detected capacity change from 0 to 4 [ 253.394895][T24862] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 253.395183][T24830] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000040)=""/243, &(0x7f0000000140)=0xf3) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000001380), 0x0, 0x3, 0x101) 02:46:58 executing program 2 (fault-call:7 fault-nth:17): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:58 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 253.415632][T24864] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 253.461585][T24862] loop3: detected capacity change from 0 to 4 [ 253.466603][T24883] FAULT_INJECTION: forcing a failure. [ 253.466603][T24883] name failslab, interval 1, probability 0, space 0, times 0 [ 253.480394][T24883] CPU: 0 PID: 24883 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 253.489155][T24883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.499221][T24883] Call Trace: [ 253.502481][T24883] dump_stack+0x137/0x19d [ 253.506789][T24883] should_fail+0x23c/0x250 [ 253.511180][T24883] __should_failslab+0x81/0x90 [ 253.515921][T24883] ? io_req_defer+0x19c/0x470 [ 253.520591][T24883] should_failslab+0x5/0x20 [ 253.525108][T24883] kmem_cache_alloc_trace+0x49/0x320 [ 253.531239][T24883] ? io_req_defer_prep+0x218/0x440 [ 253.536376][T24883] io_req_defer+0x19c/0x470 [ 253.540880][T24883] io_queue_sqe+0x18/0x160 [ 253.545277][T24883] io_submit_sqe+0x15c7/0x30c0 [ 253.550102][T24883] ? kmem_cache_alloc_bulk+0x239/0x380 [ 253.555586][T24883] io_submit_sqes+0x61f/0xaf0 [ 253.561242][T24883] __se_sys_io_uring_enter+0x217/0xb20 [ 253.568508][T24883] ? fput+0x2d/0x130 [ 253.572406][T24883] __x64_sys_io_uring_enter+0x74/0x80 [ 253.577963][T24883] do_syscall_64+0x34/0x50 [ 253.582570][T24883] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.588934][T24883] RIP: 0033:0x466459 [ 253.592828][T24883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:46:58 executing program 2 (fault-call:7 fault-nth:18): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 253.612416][T24883] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.620809][T24883] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 253.628763][T24883] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 253.636925][T24883] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.644933][T24883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.652910][T24883] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 253.682392][T24862] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 253.691869][T24887] loop4: detected capacity change from 0 to 4 [ 253.696288][T24896] FAULT_INJECTION: forcing a failure. [ 253.696288][T24896] name failslab, interval 1, probability 0, space 0, times 0 [ 253.710724][T24896] CPU: 1 PID: 24896 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 253.719478][T24896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.729620][T24896] Call Trace: [ 253.732885][T24896] dump_stack+0x137/0x19d [ 253.737196][T24896] should_fail+0x23c/0x250 [ 253.741592][T24896] __should_failslab+0x81/0x90 [ 253.746353][T24896] ? io_req_defer_prep+0xd9/0x440 [ 253.751384][T24896] should_failslab+0x5/0x20 [ 253.755888][T24896] __kmalloc+0x66/0x360 [ 253.760175][T24896] io_req_defer_prep+0xd9/0x440 [ 253.765024][T24896] io_req_defer+0x157/0x470 [ 253.769615][T24896] io_queue_sqe+0x18/0x160 [ 253.774059][T24896] io_submit_sqe+0x15c7/0x30c0 02:46:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="1a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 253.778907][T24896] ? kmem_cache_alloc_bulk+0x239/0x380 [ 253.784458][T24896] io_submit_sqes+0x61f/0xaf0 [ 253.789121][T24896] __se_sys_io_uring_enter+0x217/0xb20 [ 253.794678][T24896] ? fput+0x2d/0x130 [ 253.798684][T24896] __x64_sys_io_uring_enter+0x74/0x80 [ 253.804054][T24896] do_syscall_64+0x34/0x50 [ 253.808502][T24896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 253.814389][T24896] RIP: 0033:0x466459 [ 253.818264][T24896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 253.837857][T24896] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 253.846256][T24896] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 253.854242][T24896] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 253.862201][T24896] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 253.870322][T24896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.878504][T24896] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:59 executing program 2 (fault-call:7 fault-nth:19): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="330000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 253.911343][T24901] loop0: detected capacity change from 0 to 4 [ 253.919931][T24901] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 253.936259][T24887] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 253.945605][T24907] FAULT_INJECTION: forcing a failure. [ 253.945605][T24907] name failslab, interval 1, probability 0, space 0, times 0 [ 253.958646][T24907] CPU: 1 PID: 24907 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 253.967401][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.977438][T24907] Call Trace: [ 253.980740][T24907] dump_stack+0x137/0x19d [ 253.985070][T24907] should_fail+0x23c/0x250 [ 253.989481][T24907] __should_failslab+0x81/0x90 [ 253.994228][T24907] ? io_req_defer+0x19c/0x470 [ 253.998910][T24907] should_failslab+0x5/0x20 [ 254.003398][T24907] kmem_cache_alloc_trace+0x49/0x320 [ 254.008820][T24907] ? io_req_defer_prep+0x218/0x440 [ 254.013932][T24907] io_req_defer+0x19c/0x470 [ 254.018442][T24907] io_queue_sqe+0x18/0x160 [ 254.022856][T24907] io_submit_sqe+0x15c7/0x30c0 [ 254.027678][T24907] ? kmem_cache_alloc_bulk+0x239/0x380 [ 254.033116][T24907] io_submit_sqes+0x61f/0xaf0 [ 254.037775][T24907] __se_sys_io_uring_enter+0x217/0xb20 [ 254.043274][T24907] ? fput+0x2d/0x130 [ 254.050600][T24907] __x64_sys_io_uring_enter+0x74/0x80 [ 254.055979][T24907] do_syscall_64+0x34/0x50 [ 254.060398][T24907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.066393][T24907] RIP: 0033:0x466459 [ 254.070400][T24907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.089990][T24907] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 254.098476][T24907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:46:59 executing program 2 (fault-call:7 fault-nth:20): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 254.106452][T24907] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 254.114404][T24907] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.122375][T24907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.130326][T24907] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 254.153539][T24909] loop5: detected capacity change from 0 to 4 [ 254.159742][T24901] loop0: detected capacity change from 0 to 4 [ 254.167505][T24909] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.176796][T24917] FAULT_INJECTION: forcing a failure. [ 254.176796][T24917] name failslab, interval 1, probability 0, space 0, times 0 [ 254.189801][T24917] CPU: 0 PID: 24917 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 254.198989][T24917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.209134][T24917] Call Trace: [ 254.212503][T24917] dump_stack+0x137/0x19d [ 254.216999][T24917] should_fail+0x23c/0x250 [ 254.221396][T24917] __should_failslab+0x81/0x90 [ 254.226163][T24917] ? io_req_defer_prep+0xd9/0x440 [ 254.231173][T24917] should_failslab+0x5/0x20 [ 254.235739][T24917] __kmalloc+0x66/0x360 [ 254.239874][T24917] io_req_defer_prep+0xd9/0x440 [ 254.244727][T24917] io_req_defer+0x157/0x470 [ 254.249226][T24917] io_queue_sqe+0x18/0x160 [ 254.253771][T24917] io_submit_sqe+0x15c7/0x30c0 [ 254.258547][T24917] ? kmem_cache_alloc_bulk+0x239/0x380 [ 254.263995][T24917] io_submit_sqes+0x61f/0xaf0 [ 254.268656][T24917] __se_sys_io_uring_enter+0x217/0xb20 [ 254.274565][T24917] ? fput+0x2d/0x130 [ 254.278455][T24917] __x64_sys_io_uring_enter+0x74/0x80 [ 254.283812][T24917] do_syscall_64+0x34/0x50 [ 254.288546][T24917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.294492][T24917] RIP: 0033:0x466459 [ 254.298401][T24917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.318034][T24917] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 254.326431][T24917] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 254.334459][T24917] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 254.342475][T24917] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.350447][T24917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:46:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200600008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 254.358399][T24917] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:46:59 executing program 2 (fault-call:7 fault-nth:21): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000240)="11bae66728dc3a90622d82e045f9b0e920d4f1365afc59d3d06e8deaec0190efe96d6230a635e15d533603ee3e1973704165105fa0e157f81759f837259b8733916aaa2923733b37720008eaa466d82b634df53eacaa2dc994978d53b20a033805092ecfe6548505dacdfa4ec3b8742162ab311adec36c1a5e9a1db1c8a337040e408f54e567ef2277a65e5856b816b792bdb7629cd71ea1febfebaefced5c9c0652d3c887c4543051350d04cee6ae3bc8d736091c2ae10b5f834519e2a64dedd63f", 0xc2, 0x20000010, &(0x7f0000000140)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = dup3(r2, r1, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r0, &(0x7f0000000440)=""/49, 0x31, 0x20, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1ff}, 0x1c) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x18500, 0x229) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000307030000000000000000000800be4000ddf6de61002340000000010c0002400000000000ffffff7f00000000797a31000000000c000780080002400000001f0000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048880) sendto$inet6(r2, &(0x7f0000000040)="98a95838af609b64294be08fb3db7e1e840c4060432366ea675d8468b1d36b68a002cfa738f94957968aafec6f9af15b745f430dd7f91692819341e0fc53216b", 0x40, 0x40c4080, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 254.394908][T24909] loop5: detected capacity change from 0 to 4 [ 254.401099][T24914] loop3: detected capacity change from 0 to 4 [ 254.419297][T24909] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.429675][T24914] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.440847][T24930] loop4: detected capacity change from 0 to 4 [ 254.447240][T24901] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.452190][T24935] FAULT_INJECTION: forcing a failure. [ 254.452190][T24935] name failslab, interval 1, probability 0, space 0, times 0 [ 254.469297][T24935] CPU: 1 PID: 24935 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 254.475631][T24930] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:46:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="1b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 254.478139][T24935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.478152][T24935] Call Trace: [ 254.478160][T24935] dump_stack+0x137/0x19d [ 254.505271][T24935] should_fail+0x23c/0x250 [ 254.509694][T24935] __should_failslab+0x81/0x90 [ 254.514462][T24935] ? io_req_defer+0x19c/0x470 [ 254.519218][T24935] should_failslab+0x5/0x20 [ 254.523810][T24935] kmem_cache_alloc_trace+0x49/0x320 [ 254.529123][T24935] ? io_req_defer_prep+0x218/0x440 [ 254.534271][T24935] io_req_defer+0x19c/0x470 [ 254.538760][T24935] io_queue_sqe+0x18/0x160 [ 254.543199][T24935] io_submit_sqe+0x15c7/0x30c0 [ 254.548022][T24935] ? kmem_cache_alloc_bulk+0x239/0x380 [ 254.553499][T24935] io_submit_sqes+0x61f/0xaf0 [ 254.558204][T24935] __se_sys_io_uring_enter+0x217/0xb20 [ 254.563642][T24935] ? fput+0x2d/0x130 [ 254.567519][T24935] __x64_sys_io_uring_enter+0x74/0x80 [ 254.572882][T24935] do_syscall_64+0x34/0x50 [ 254.577280][T24935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.583291][T24935] RIP: 0033:0x466459 [ 254.587178][T24935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 254.606775][T24935] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 254.615181][T24935] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 254.623138][T24935] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 254.631107][T24935] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:46:59 executing program 2 (fault-call:7 fault-nth:22): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:46:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 254.639067][T24935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.647073][T24935] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 254.707635][T24930] loop4: detected capacity change from 0 to 4 [ 254.713828][T24914] loop3: detected capacity change from 0 to 4 [ 254.720625][T24914] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.730899][T24953] loop5: detected capacity change from 0 to 4 [ 254.739010][T24930] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.750280][T24953] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 254.757509][T24962] FAULT_INJECTION: forcing a failure. [ 254.757509][T24962] name failslab, interval 1, probability 0, space 0, times 0 [ 254.773022][T24962] CPU: 1 PID: 24962 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 254.781919][T24962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.792075][T24962] Call Trace: [ 254.795454][T24962] dump_stack+0x137/0x19d [ 254.799786][T24962] should_fail+0x23c/0x250 [ 254.804209][T24962] __should_failslab+0x81/0x90 [ 254.809818][T24962] ? io_req_defer_prep+0xd9/0x440 [ 254.814951][T24962] should_failslab+0x5/0x20 [ 254.819563][T24962] __kmalloc+0x66/0x360 [ 254.823847][T24962] io_req_defer_prep+0xd9/0x440 [ 254.828687][T24962] io_req_defer+0x157/0x470 [ 254.833327][T24962] io_queue_sqe+0x18/0x160 [ 254.837748][T24962] io_submit_sqe+0x15c7/0x30c0 [ 254.842646][T24962] ? kmem_cache_alloc_bulk+0x239/0x380 [ 254.848110][T24962] io_submit_sqes+0x61f/0xaf0 [ 254.852785][T24962] __se_sys_io_uring_enter+0x217/0xb20 [ 254.858227][T24962] ? fput+0x2d/0x130 [ 254.862152][T24962] __x64_sys_io_uring_enter+0x74/0x80 [ 254.867575][T24962] do_syscall_64+0x34/0x50 [ 254.872001][T24962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 254.877899][T24962] RIP: 0033:0x466459 [ 254.881810][T24962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:00 executing program 2 (fault-call:7 fault-nth:23): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 254.901653][T24962] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 254.910190][T24962] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 254.918184][T24962] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 254.926208][T24962] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 254.934257][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.942269][T24962] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="340000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200700008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 254.985090][T24959] loop0: detected capacity change from 0 to 4 [ 255.003313][T24953] loop5: detected capacity change from 0 to 4 [ 255.015360][T24972] FAULT_INJECTION: forcing a failure. [ 255.015360][T24972] name failslab, interval 1, probability 0, space 0, times 0 [ 255.028181][T24972] CPU: 1 PID: 24972 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 255.036938][T24972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.047105][T24972] Call Trace: [ 255.050376][T24972] dump_stack+0x137/0x19d [ 255.054693][T24972] should_fail+0x23c/0x250 [ 255.059099][T24972] __should_failslab+0x81/0x90 [ 255.063907][T24972] ? io_req_defer+0x19c/0x470 [ 255.068566][T24972] should_failslab+0x5/0x20 [ 255.073092][T24972] kmem_cache_alloc_trace+0x49/0x320 [ 255.078546][T24972] ? io_req_defer_prep+0x218/0x440 [ 255.083640][T24972] io_req_defer+0x19c/0x470 [ 255.088144][T24972] io_queue_sqe+0x18/0x160 [ 255.092623][T24972] io_submit_sqe+0x15c7/0x30c0 [ 255.097457][T24972] ? kmem_cache_alloc_bulk+0x239/0x380 [ 255.102913][T24972] io_submit_sqes+0x61f/0xaf0 [ 255.107582][T24972] __se_sys_io_uring_enter+0x217/0xb20 [ 255.113854][T24972] ? fput+0x2d/0x130 [ 255.118054][T24972] __x64_sys_io_uring_enter+0x74/0x80 [ 255.123667][T24972] do_syscall_64+0x34/0x50 [ 255.128217][T24972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.134095][T24972] RIP: 0033:0x466459 [ 255.137966][T24972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.157566][T24972] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 255.165959][T24972] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 255.175133][T24972] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 255.183084][T24972] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.191038][T24972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.198987][T24972] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 255.215591][T24978] loop4: detected capacity change from 0 to 4 [ 255.223150][T24978] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:00 executing program 2 (fault-call:7 fault-nth:24): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 255.228176][T24953] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.242065][T24959] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.267364][T24983] loop3: detected capacity change from 0 to 4 [ 255.267372][T24978] loop4: detected capacity change from 0 to 4 [ 255.285795][T24978] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.286031][T24984] FAULT_INJECTION: forcing a failure. [ 255.286031][T24984] name failslab, interval 1, probability 0, space 0, times 0 [ 255.300954][T24983] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.307879][T24984] CPU: 0 PID: 24984 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 255.307903][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.321260][T24959] loop0: detected capacity change from 0 to 4 [ 255.326960][T24984] Call Trace: [ 255.326970][T24984] dump_stack+0x137/0x19d [ 255.326993][T24984] should_fail+0x23c/0x250 [ 255.355771][T24984] __should_failslab+0x81/0x90 [ 255.360550][T24984] ? io_req_defer_prep+0xd9/0x440 [ 255.365570][T24984] should_failslab+0x5/0x20 [ 255.370231][T24984] __kmalloc+0x66/0x360 [ 255.374401][T24984] io_req_defer_prep+0xd9/0x440 [ 255.379365][T24984] io_req_defer+0x157/0x470 [ 255.383946][T24984] io_queue_sqe+0x18/0x160 [ 255.388653][T24984] io_submit_sqe+0x15c7/0x30c0 [ 255.393502][T24984] ? kmem_cache_alloc_bulk+0x239/0x380 [ 255.399051][T24984] io_submit_sqes+0x61f/0xaf0 [ 255.403911][T24984] __se_sys_io_uring_enter+0x217/0xb20 [ 255.410004][T24984] ? fput+0x2d/0x130 [ 255.413979][T24984] __x64_sys_io_uring_enter+0x74/0x80 [ 255.421070][T24984] do_syscall_64+0x34/0x50 [ 255.425730][T24984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.431612][T24984] RIP: 0033:0x466459 [ 255.436617][T24984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.459128][T24984] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 255.467958][T24984] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="210000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 02:47:00 executing program 2 (fault-call:7 fault-nth:25): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 255.479832][T24984] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 255.491198][T24984] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.500047][T24984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.509317][T24984] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 255.527710][T24959] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:00 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200b00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 255.607668][T24983] loop3: detected capacity change from 0 to 4 [ 255.622414][T24983] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.635643][T25009] FAULT_INJECTION: forcing a failure. [ 255.635643][T25009] name failslab, interval 1, probability 0, space 0, times 0 [ 255.640377][T25010] loop5: detected capacity change from 0 to 4 [ 255.649065][T25009] CPU: 0 PID: 25009 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 255.657570][T25016] loop4: detected capacity change from 0 to 4 [ 255.665200][T25009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.682770][T25009] Call Trace: [ 255.686225][T25009] dump_stack+0x137/0x19d [ 255.690898][T25009] should_fail+0x23c/0x250 [ 255.696152][T25009] __should_failslab+0x81/0x90 [ 255.701589][T25009] ? io_req_defer+0x19c/0x470 [ 255.706526][T25009] should_failslab+0x5/0x20 [ 255.711347][T25009] kmem_cache_alloc_trace+0x49/0x320 [ 255.717082][T25009] ? io_req_defer_prep+0x218/0x440 [ 255.722192][T25009] io_req_defer+0x19c/0x470 [ 255.726830][T25009] io_queue_sqe+0x18/0x160 [ 255.732913][T25009] io_submit_sqe+0x15c7/0x30c0 [ 255.737956][T25009] ? kmem_cache_alloc_bulk+0x239/0x380 [ 255.743540][T25009] io_submit_sqes+0x61f/0xaf0 [ 255.748529][T25009] __se_sys_io_uring_enter+0x217/0xb20 [ 255.755062][T25009] ? fput+0x2d/0x130 [ 255.759074][T25009] __x64_sys_io_uring_enter+0x74/0x80 [ 255.764634][T25009] do_syscall_64+0x34/0x50 [ 255.769740][T25009] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 255.779297][T25009] RIP: 0033:0x466459 [ 255.783181][T25009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 255.807432][T25009] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 255.819582][T25009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 255.828387][T25009] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 255.836529][T25009] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 255.844743][T25009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:01 executing program 2 (fault-call:7 fault-nth:26): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="350000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 255.852714][T25009] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 255.922452][T25029] FAULT_INJECTION: forcing a failure. [ 255.922452][T25029] name failslab, interval 1, probability 0, space 0, times 0 [ 255.935155][T25029] CPU: 1 PID: 25029 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 255.942128][T25010] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.944299][T25029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.944311][T25029] Call Trace: [ 255.944318][T25029] dump_stack+0x137/0x19d [ 255.971532][T25029] should_fail+0x23c/0x250 [ 255.976404][T25029] __should_failslab+0x81/0x90 [ 255.977557][T25016] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 255.981218][T25029] ? io_req_defer_prep+0xd9/0x440 [ 255.981247][T25029] should_failslab+0x5/0x20 [ 256.000442][T25029] __kmalloc+0x66/0x360 [ 256.004735][T25029] io_req_defer_prep+0xd9/0x440 [ 256.009668][T25029] io_req_defer+0x157/0x470 [ 256.012676][T25027] loop0: detected capacity change from 0 to 4 [ 256.014173][T25029] io_queue_sqe+0x18/0x160 [ 256.024658][T25029] io_submit_sqe+0x15c7/0x30c0 [ 256.029633][T25029] ? kmem_cache_alloc_bulk+0x239/0x380 [ 256.033475][T25027] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.035267][T25029] io_submit_sqes+0x61f/0xaf0 [ 256.049434][T25029] __se_sys_io_uring_enter+0x217/0xb20 [ 256.054907][T25029] ? fput+0x2d/0x130 [ 256.059062][T25029] __x64_sys_io_uring_enter+0x74/0x80 [ 256.064797][T25029] do_syscall_64+0x34/0x50 [ 256.069293][T25029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.072492][T25034] loop3: detected capacity change from 0 to 4 [ 256.075239][T25029] RIP: 0033:0x466459 [ 256.075257][T25029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.075271][T25029] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.086292][T25034] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:01 executing program 2 (fault-call:7 fault-nth:27): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 256.105076][T25029] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 256.105094][T25029] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 256.105106][T25029] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.105117][T25029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.105126][T25029] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 256.159058][T25042] FAULT_INJECTION: forcing a failure. [ 256.159058][T25042] name failslab, interval 1, probability 0, space 0, times 0 [ 256.177992][T25042] CPU: 1 PID: 25042 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 256.186775][T25042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.196930][T25042] Call Trace: [ 256.200477][T25042] dump_stack+0x137/0x19d [ 256.204895][T25042] should_fail+0x23c/0x250 [ 256.209296][T25042] __should_failslab+0x81/0x90 [ 256.214654][T25042] ? io_req_defer_prep+0xd9/0x440 [ 256.219743][T25042] should_failslab+0x5/0x20 [ 256.224252][T25042] __kmalloc+0x66/0x360 [ 256.228394][T25042] io_req_defer_prep+0xd9/0x440 [ 256.233241][T25042] io_req_defer+0x157/0x470 [ 256.237970][T25042] io_queue_sqe+0x18/0x160 [ 256.242478][T25042] io_submit_sqe+0x15c7/0x30c0 [ 256.247253][T25042] ? kmem_cache_alloc_bulk+0x239/0x380 [ 256.252701][T25042] io_submit_sqes+0x61f/0xaf0 [ 256.257932][T25042] __se_sys_io_uring_enter+0x217/0xb20 [ 256.263420][T25042] ? fput+0x2d/0x130 [ 256.267400][T25042] __x64_sys_io_uring_enter+0x74/0x80 [ 256.272775][T25042] do_syscall_64+0x34/0x50 [ 256.277339][T25042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.283270][T25042] RIP: 0033:0x466459 [ 256.287170][T25042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.306922][T25042] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.315373][T25042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 256.323446][T25042] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 256.331432][T25042] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.339473][T25042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.347526][T25042] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 256.366883][T25027] loop0: detected capacity change from 0 to 4 02:47:01 executing program 2 (fault-call:7 fault-nth:28): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 256.373094][T25016] loop4: detected capacity change from 0 to 4 [ 256.383049][T25016] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.392621][T25027] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.402071][T25010] loop5: detected capacity change from 0 to 4 [ 256.408619][T25034] loop3: detected capacity change from 0 to 4 02:47:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 256.440441][T25010] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.450636][T25034] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.477332][T25069] FAULT_INJECTION: forcing a failure. [ 256.477332][T25069] name failslab, interval 1, probability 0, space 0, times 0 [ 256.490706][T25069] CPU: 1 PID: 25069 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 256.499470][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.511023][T25069] Call Trace: [ 256.514372][T25069] dump_stack+0x137/0x19d [ 256.520432][T25069] should_fail+0x23c/0x250 [ 256.524841][T25069] __should_failslab+0x81/0x90 [ 256.529600][T25069] ? io_req_defer_prep+0xd9/0x440 [ 256.534625][T25069] should_failslab+0x5/0x20 [ 256.539113][T25069] __kmalloc+0x66/0x360 [ 256.543289][T25069] io_req_defer_prep+0xd9/0x440 [ 256.548222][T25069] io_req_defer+0x157/0x470 [ 256.552811][T25069] io_queue_sqe+0x18/0x160 [ 256.557263][T25069] io_submit_sqe+0x15c7/0x30c0 [ 256.562424][T25069] ? kmem_cache_alloc_bulk+0x239/0x380 [ 256.568030][T25069] io_submit_sqes+0x61f/0xaf0 [ 256.572751][T25069] __se_sys_io_uring_enter+0x217/0xb20 [ 256.578260][T25069] ? fput+0x2d/0x130 [ 256.582163][T25069] __x64_sys_io_uring_enter+0x74/0x80 [ 256.587671][T25069] do_syscall_64+0x34/0x50 [ 256.592168][T25069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.598087][T25069] RIP: 0033:0x466459 [ 256.601966][T25069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.621745][T25069] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 256.630319][T25069] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="220000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:01 executing program 2 (fault-call:7 fault-nth:29): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 256.638273][T25069] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 256.646380][T25069] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.654859][T25069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.663751][T25069] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="360000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 256.715795][T25072] loop0: detected capacity change from 0 to 4 [ 256.732738][T25072] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.747065][T25088] FAULT_INJECTION: forcing a failure. [ 256.747065][T25088] name failslab, interval 1, probability 0, space 0, times 0 [ 256.757871][T25080] loop4: detected capacity change from 0 to 4 [ 256.760298][T25088] CPU: 1 PID: 25088 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 256.776541][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.787246][T25088] Call Trace: [ 256.790907][T25088] dump_stack+0x137/0x19d [ 256.795289][T25088] should_fail+0x23c/0x250 [ 256.799862][T25088] __should_failslab+0x81/0x90 [ 256.805166][T25088] ? io_req_defer+0x19c/0x470 [ 256.810107][T25088] should_failslab+0x5/0x20 [ 256.816201][T25088] kmem_cache_alloc_trace+0x49/0x320 [ 256.821568][T25088] ? io_req_defer_prep+0x218/0x440 [ 256.826743][T25088] io_req_defer+0x19c/0x470 [ 256.831762][T25088] io_queue_sqe+0x18/0x160 [ 256.836168][T25088] io_submit_sqe+0x15c7/0x30c0 [ 256.841441][T25088] ? kmem_cache_alloc_bulk+0x239/0x380 [ 256.846907][T25088] io_submit_sqes+0x61f/0xaf0 [ 256.851643][T25088] __se_sys_io_uring_enter+0x217/0xb20 [ 256.857135][T25088] ? fput+0x2d/0x130 [ 256.861126][T25088] __x64_sys_io_uring_enter+0x74/0x80 [ 256.866512][T25088] do_syscall_64+0x34/0x50 [ 256.870981][T25088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 256.877748][T25088] RIP: 0033:0x466459 [ 256.882506][T25088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 256.902276][T25088] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:02 executing program 2 (fault-call:7 fault-nth:30): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 256.911431][T25088] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 256.920563][T25088] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 256.929250][T25088] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 256.937404][T25088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.945468][T25088] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 256.978923][T25080] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 256.984218][T25072] loop0: detected capacity change from 0 to 4 [ 256.989011][T25094] loop5: detected capacity change from 0 to 4 [ 257.001403][T25072] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.008532][T25093] loop3: detected capacity change from 0 to 4 [ 257.017773][T25094] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.032120][T25104] FAULT_INJECTION: forcing a failure. [ 257.032120][T25104] name failslab, interval 1, probability 0, space 0, times 0 [ 257.045591][T25104] CPU: 1 PID: 25104 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 257.051730][T25093] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.055580][T25104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.055594][T25104] Call Trace: [ 257.055602][T25104] dump_stack+0x137/0x19d [ 257.087232][T25104] should_fail+0x23c/0x250 [ 257.091755][T25104] __should_failslab+0x81/0x90 [ 257.098936][T25104] ? io_req_defer_prep+0xd9/0x440 [ 257.104025][T25104] should_failslab+0x5/0x20 [ 257.109271][T25104] __kmalloc+0x66/0x360 [ 257.113688][T25104] io_req_defer_prep+0xd9/0x440 [ 257.119284][T25104] io_req_defer+0x157/0x470 [ 257.123908][T25104] io_queue_sqe+0x18/0x160 [ 257.128485][T25104] io_submit_sqe+0x15c7/0x30c0 [ 257.133242][T25104] ? kmem_cache_alloc_bulk+0x239/0x380 [ 257.138738][T25104] io_submit_sqes+0x61f/0xaf0 [ 257.143421][T25104] __se_sys_io_uring_enter+0x217/0xb20 [ 257.148874][T25104] ? fput+0x2d/0x130 [ 257.152777][T25104] __x64_sys_io_uring_enter+0x74/0x80 [ 257.158163][T25104] do_syscall_64+0x34/0x50 [ 257.162564][T25104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.168468][T25104] RIP: 0033:0x466459 [ 257.172351][T25104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 257.191971][T25104] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 257.200388][T25104] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 257.208365][T25104] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 257.216396][T25104] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.224348][T25104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:02 executing program 2 (fault-call:7 fault-nth:31): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 257.232327][T25104] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200d00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 257.277937][T25094] loop5: detected capacity change from 0 to 4 [ 257.280906][T25093] loop3: detected capacity change from 0 to 4 [ 257.291363][T25093] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.295523][T25094] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.318186][T25124] loop4: detected capacity change from 0 to 4 [ 257.319550][T25122] FAULT_INJECTION: forcing a failure. [ 257.319550][T25122] name failslab, interval 1, probability 0, space 0, times 0 [ 257.337055][T25122] CPU: 1 PID: 25122 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 257.338105][T25124] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.345958][T25122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.345973][T25122] Call Trace: [ 257.345980][T25122] dump_stack+0x137/0x19d [ 257.372875][T25122] should_fail+0x23c/0x250 [ 257.377300][T25122] __should_failslab+0x81/0x90 [ 257.382062][T25122] ? io_req_defer+0x19c/0x470 [ 257.386847][T25122] should_failslab+0x5/0x20 [ 257.391434][T25122] kmem_cache_alloc_trace+0x49/0x320 [ 257.396731][T25122] ? io_req_defer_prep+0x218/0x440 [ 257.401905][T25122] io_req_defer+0x19c/0x470 [ 257.406390][T25122] io_queue_sqe+0x18/0x160 [ 257.410785][T25122] io_submit_sqe+0x15c7/0x30c0 [ 257.415623][T25122] ? kmem_cache_alloc_bulk+0x239/0x380 [ 257.421186][T25122] io_submit_sqes+0x61f/0xaf0 [ 257.425893][T25122] __se_sys_io_uring_enter+0x217/0xb20 [ 257.431467][T25122] ? fput+0x2d/0x130 [ 257.435407][T25122] __x64_sys_io_uring_enter+0x74/0x80 [ 257.440822][T25122] do_syscall_64+0x34/0x50 [ 257.445513][T25122] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.451636][T25122] RIP: 0033:0x466459 [ 257.455598][T25122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:02 executing program 2 (fault-call:7 fault-nth:32): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:02 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="230000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 257.476270][T25122] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 257.484768][T25122] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 257.492743][T25122] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 257.500807][T25122] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.508764][T25122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.517468][T25122] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="370000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 257.573562][T25129] loop0: detected capacity change from 0 to 4 [ 257.575211][T25124] loop4: detected capacity change from 0 to 4 [ 257.589407][T25129] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.600092][T25124] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.611017][T25144] FAULT_INJECTION: forcing a failure. [ 257.611017][T25144] name failslab, interval 1, probability 0, space 0, times 0 [ 257.623743][T25144] CPU: 0 PID: 25144 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 257.632514][T25144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.642573][T25144] Call Trace: [ 257.645853][T25144] dump_stack+0x137/0x19d [ 257.650353][T25144] should_fail+0x23c/0x250 [ 257.654784][T25144] __should_failslab+0x81/0x90 [ 257.659562][T25144] should_failslab+0x5/0x20 [ 257.664082][T25144] kmem_cache_alloc_bulk+0x40/0x380 [ 257.669318][T25144] io_submit_sqes+0x515/0xaf0 [ 257.674009][T25144] __se_sys_io_uring_enter+0x217/0xb20 [ 257.679532][T25144] ? fput+0x2d/0x130 [ 257.683436][T25144] __x64_sys_io_uring_enter+0x74/0x80 [ 257.688983][T25144] do_syscall_64+0x34/0x50 [ 257.693389][T25144] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.699417][T25144] RIP: 0033:0x466459 [ 257.703466][T25144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200b00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 257.723056][T25144] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 257.731604][T25144] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 257.739700][T25144] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 257.747776][T25144] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 257.755728][T25144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.763681][T25144] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/6, 0x6, 0x41, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @mcast2, 0x8000}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x0, @private}}) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:03 executing program 2 (fault-call:7 fault-nth:33): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 257.777175][T25151] loop3: detected capacity change from 0 to 4 [ 257.780098][T25145] loop5: detected capacity change from 0 to 4 [ 257.785357][T25151] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.805620][T25145] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 257.832249][T25162] FAULT_INJECTION: forcing a failure. [ 257.832249][T25162] name failslab, interval 1, probability 0, space 0, times 0 [ 257.845092][T25162] CPU: 0 PID: 25162 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 257.853936][T25162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.864006][T25162] Call Trace: [ 257.867448][T25162] dump_stack+0x137/0x19d [ 257.871856][T25162] should_fail+0x23c/0x250 [ 257.876290][T25162] __should_failslab+0x81/0x90 [ 257.881080][T25162] ? io_req_defer_prep+0xd9/0x440 [ 257.886122][T25162] should_failslab+0x5/0x20 [ 257.890624][T25162] __kmalloc+0x66/0x360 [ 257.894801][T25162] io_req_defer_prep+0xd9/0x440 [ 257.899642][T25162] io_req_defer+0x157/0x470 [ 257.904507][T25162] io_queue_sqe+0x18/0x160 [ 257.909108][T25162] io_submit_sqe+0x15c7/0x30c0 [ 257.913879][T25162] ? kmem_cache_alloc_bulk+0x239/0x380 [ 257.919350][T25162] io_submit_sqes+0x61f/0xaf0 [ 257.924014][T25162] __se_sys_io_uring_enter+0x217/0xb20 [ 257.929457][T25162] ? fput+0x2d/0x130 [ 257.933338][T25162] __x64_sys_io_uring_enter+0x74/0x80 [ 257.938744][T25162] do_syscall_64+0x34/0x50 [ 257.944196][T25162] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 257.950106][T25162] RIP: 0033:0x466459 [ 257.953990][T25162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 257.973847][T25162] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:03 executing program 2 (fault-call:7 fault-nth:34): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 257.982296][T25162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 257.990279][T25162] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 257.998231][T25162] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.006185][T25162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.014143][T25162] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 258.044820][T25151] loop3: detected capacity change from 0 to 4 [ 258.052089][T25129] loop0: detected capacity change from 0 to 4 [ 258.058712][T25145] loop5: detected capacity change from 0 to 4 [ 258.066594][T25145] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.076513][T25129] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.087717][T25151] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.099503][T25182] FAULT_INJECTION: forcing a failure. [ 258.099503][T25182] name failslab, interval 1, probability 0, space 0, times 0 [ 258.112165][T25182] CPU: 1 PID: 25182 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 258.121219][T25182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.131334][T25182] Call Trace: [ 258.134610][T25182] dump_stack+0x137/0x19d [ 258.138934][T25182] should_fail+0x23c/0x250 [ 258.143380][T25182] __should_failslab+0x81/0x90 [ 258.148565][T25182] ? io_req_defer+0x19c/0x470 [ 258.153229][T25182] should_failslab+0x5/0x20 [ 258.157788][T25182] kmem_cache_alloc_trace+0x49/0x320 [ 258.163091][T25182] ? io_req_defer_prep+0x218/0x440 [ 258.168233][T25182] io_req_defer+0x19c/0x470 [ 258.172760][T25182] io_queue_sqe+0x18/0x160 [ 258.177321][T25182] io_submit_sqe+0x15c7/0x30c0 [ 258.182093][T25182] ? kmem_cache_alloc_bulk+0x239/0x380 [ 258.187621][T25182] io_submit_sqes+0x61f/0xaf0 [ 258.192404][T25182] __se_sys_io_uring_enter+0x217/0xb20 [ 258.197843][T25182] ? fput+0x2d/0x130 [ 258.201788][T25182] __x64_sys_io_uring_enter+0x74/0x80 [ 258.207210][T25182] do_syscall_64+0x34/0x50 [ 258.211709][T25182] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.217598][T25182] RIP: 0033:0x466459 [ 258.221560][T25182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.241165][T25182] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 258.249571][T25182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 258.257581][T25182] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 258.265884][T25182] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.274029][T25182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.283283][T25182] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:03 executing program 2 (fault-call:7 fault-nth:35): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="240000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 258.308065][T25181] loop4: detected capacity change from 0 to 4 [ 258.318175][T25181] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.343148][T25195] FAULT_INJECTION: forcing a failure. [ 258.343148][T25195] name failslab, interval 1, probability 0, space 0, times 0 [ 258.343906][T25192] loop5: detected capacity change from 0 to 4 [ 258.355998][T25195] CPU: 0 PID: 25195 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 258.370811][T25195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.380861][T25195] Call Trace: [ 258.384134][T25195] dump_stack+0x137/0x19d [ 258.388453][T25195] should_fail+0x23c/0x250 [ 258.394847][T25195] __should_failslab+0x81/0x90 [ 258.399594][T25195] ? io_req_defer_prep+0xd9/0x440 [ 258.404756][T25195] should_failslab+0x5/0x20 [ 258.409270][T25195] __kmalloc+0x66/0x360 [ 258.413472][T25195] io_req_defer_prep+0xd9/0x440 [ 258.418509][T25195] io_req_defer+0x157/0x470 [ 258.423013][T25195] io_queue_sqe+0x18/0x160 [ 258.427425][T25195] io_submit_sqe+0x15c7/0x30c0 [ 258.432224][T25195] ? kmem_cache_alloc_bulk+0x239/0x380 [ 258.437749][T25195] io_submit_sqes+0x61f/0xaf0 [ 258.442461][T25195] __se_sys_io_uring_enter+0x217/0xb20 [ 258.447933][T25195] ? fput+0x2d/0x130 [ 258.451853][T25195] __x64_sys_io_uring_enter+0x74/0x80 [ 258.457300][T25195] do_syscall_64+0x34/0x50 [ 258.461862][T25195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.468464][T25195] RIP: 0033:0x466459 [ 258.472351][T25195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.491966][T25195] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 258.500361][T25195] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="380000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:03 executing program 2 (fault-call:7 fault-nth:36): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 258.508586][T25195] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 258.516538][T25195] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 258.524589][T25195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.532542][T25195] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 258.540677][T25192] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.572227][T25181] loop4: detected capacity change from 0 to 4 [ 258.621612][T25181] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.629913][T25216] FAULT_INJECTION: forcing a failure. [ 258.629913][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 258.630987][T25192] loop5: detected capacity change from 0 to 4 [ 258.643654][T25216] CPU: 1 PID: 25216 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 258.654911][T25210] loop3: detected capacity change from 0 to 4 [ 258.658441][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.658454][T25216] Call Trace: [ 258.658462][T25216] dump_stack+0x137/0x19d [ 258.682180][T25216] should_fail+0x23c/0x250 [ 258.686648][T25216] __should_failslab+0x81/0x90 [ 258.691400][T25216] ? io_req_defer+0x19c/0x470 [ 258.696068][T25216] should_failslab+0x5/0x20 [ 258.700652][T25216] kmem_cache_alloc_trace+0x49/0x320 [ 258.705983][T25216] ? io_req_defer_prep+0x218/0x440 [ 258.711124][T25216] io_req_defer+0x19c/0x470 [ 258.715635][T25216] io_queue_sqe+0x18/0x160 [ 258.720046][T25216] io_submit_sqe+0x15c7/0x30c0 [ 258.724802][T25216] ? kmem_cache_alloc_bulk+0x239/0x380 [ 258.730253][T25216] io_submit_sqes+0x61f/0xaf0 [ 258.734929][T25216] __se_sys_io_uring_enter+0x217/0xb20 [ 258.740448][T25216] ? fput+0x2d/0x130 [ 258.744335][T25216] __x64_sys_io_uring_enter+0x74/0x80 [ 258.749722][T25216] do_syscall_64+0x34/0x50 [ 258.754145][T25216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.760026][T25216] RIP: 0033:0x466459 [ 258.763912][T25216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.783504][T25216] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 258.791901][T25216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 258.799953][T25216] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 258.807976][T25216] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:04 executing program 2 (fault-call:7 fault-nth:37): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 258.815926][T25216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.823876][T25216] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 258.832490][T25204] loop0: detected capacity change from 0 to 4 [ 258.843898][T25192] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="250000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100)=0xff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') sendto$inet6(r2, &(0x7f0000000040)="729a3db31a7d296396c5175d216880c9c4907990387650a6eea2997334a972af93ceeb9a5eff88207b15f9b2bfa21c92a3c902a5e072f7122977bfffb82ae19fa0166a32ca123f459258a2217258", 0x4e, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200d00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 258.869024][T25204] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.878723][T25210] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 258.898179][T25228] FAULT_INJECTION: forcing a failure. [ 258.898179][T25228] name failslab, interval 1, probability 0, space 0, times 0 [ 258.910834][T25228] CPU: 0 PID: 25228 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 258.919609][T25228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.929651][T25228] Call Trace: [ 258.932916][T25228] dump_stack+0x137/0x19d [ 258.937229][T25228] should_fail+0x23c/0x250 [ 258.941627][T25228] __should_failslab+0x81/0x90 [ 258.946461][T25228] ? io_req_defer_prep+0xd9/0x440 [ 258.951465][T25228] should_failslab+0x5/0x20 [ 258.956141][T25228] __kmalloc+0x66/0x360 [ 258.960307][T25228] io_req_defer_prep+0xd9/0x440 [ 258.965195][T25228] io_req_defer+0x157/0x470 [ 258.969736][T25228] io_queue_sqe+0x18/0x160 [ 258.974146][T25228] io_submit_sqe+0x15c7/0x30c0 [ 258.978970][T25228] ? kmem_cache_alloc_bulk+0x239/0x380 [ 258.984442][T25228] io_submit_sqes+0x61f/0xaf0 [ 258.989161][T25228] __se_sys_io_uring_enter+0x217/0xb20 [ 258.994601][T25228] ? fput+0x2d/0x130 [ 258.998553][T25228] __x64_sys_io_uring_enter+0x74/0x80 [ 259.003989][T25228] do_syscall_64+0x34/0x50 [ 259.008400][T25228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.014273][T25228] RIP: 0033:0x466459 [ 259.018155][T25228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.037827][T25228] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 259.046221][T25228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 259.054173][T25228] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 259.062138][T25228] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.070108][T25228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.078072][T25228] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 259.099126][T25233] loop4: detected capacity change from 0 to 4 [ 259.105279][T25210] loop3: detected capacity change from 0 to 4 [ 259.112034][T25204] loop0: detected capacity change from 0 to 4 02:47:04 executing program 2 (fault-call:7 fault-nth:38): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 259.119120][T25204] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.129140][T25233] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.131968][T25210] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="390000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200f00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 259.214805][T25249] loop5: detected capacity change from 0 to 4 [ 259.234445][T25233] loop4: detected capacity change from 0 to 4 [ 259.239479][T25249] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.248549][T25256] FAULT_INJECTION: forcing a failure. [ 259.248549][T25256] name failslab, interval 1, probability 0, space 0, times 0 [ 259.262612][T25256] CPU: 0 PID: 25256 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 259.263677][T25261] loop3: detected capacity change from 0 to 4 [ 259.271612][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.271625][T25256] Call Trace: [ 259.271632][T25256] dump_stack+0x137/0x19d [ 259.271654][T25256] should_fail+0x23c/0x250 [ 259.283488][T25233] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.288786][T25256] __should_failslab+0x81/0x90 [ 259.288813][T25256] ? io_req_defer+0x19c/0x470 [ 259.319738][T25256] should_failslab+0x5/0x20 [ 259.324381][T25256] kmem_cache_alloc_trace+0x49/0x320 [ 259.329689][T25256] ? io_req_defer_prep+0x218/0x440 [ 259.334784][T25256] io_req_defer+0x19c/0x470 [ 259.339362][T25256] io_queue_sqe+0x18/0x160 [ 259.343883][T25256] io_submit_sqe+0x15c7/0x30c0 [ 259.348651][T25256] ? kmem_cache_alloc_bulk+0x239/0x380 [ 259.354310][T25256] io_submit_sqes+0x61f/0xaf0 [ 259.359025][T25256] __se_sys_io_uring_enter+0x217/0xb20 [ 259.364471][T25256] ? fput+0x2d/0x130 [ 259.368371][T25256] __x64_sys_io_uring_enter+0x74/0x80 [ 259.373750][T25256] do_syscall_64+0x34/0x50 [ 259.378171][T25256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.384046][T25256] RIP: 0033:0x466459 [ 259.388069][T25256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:04 executing program 2 (fault-call:7 fault-nth:39): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 259.408331][T25256] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 259.416916][T25256] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 259.424974][T25256] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 259.432929][T25256] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.440890][T25256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.448853][T25256] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 259.493221][T25261] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.512331][T25249] loop5: detected capacity change from 0 to 4 [ 259.514041][T25267] loop0: detected capacity change from 0 to 4 [ 259.530914][T25249] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.542655][T25267] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.546617][T25278] FAULT_INJECTION: forcing a failure. [ 259.546617][T25278] name failslab, interval 1, probability 0, space 0, times 0 [ 259.565233][T25278] CPU: 1 PID: 25278 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 259.574551][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.584676][T25278] Call Trace: [ 259.588074][T25278] dump_stack+0x137/0x19d [ 259.592673][T25278] should_fail+0x23c/0x250 [ 259.598017][T25278] __should_failslab+0x81/0x90 [ 259.603161][T25278] ? io_req_defer_prep+0xd9/0x440 [ 259.608203][T25278] should_failslab+0x5/0x20 [ 259.613273][T25278] __kmalloc+0x66/0x360 [ 259.619204][T25278] io_req_defer_prep+0xd9/0x440 [ 259.624237][T25278] io_req_defer+0x157/0x470 [ 259.628725][T25278] io_queue_sqe+0x18/0x160 [ 259.633123][T25278] io_submit_sqe+0x15c7/0x30c0 [ 259.637869][T25278] ? kmem_cache_alloc_bulk+0x239/0x380 [ 259.643323][T25278] io_submit_sqes+0x61f/0xaf0 [ 259.647993][T25278] __se_sys_io_uring_enter+0x217/0xb20 [ 259.653863][T25278] ? fput+0x2d/0x130 [ 259.657763][T25278] __x64_sys_io_uring_enter+0x74/0x80 [ 259.663283][T25278] do_syscall_64+0x34/0x50 [ 259.667890][T25278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.673915][T25278] RIP: 0033:0x466459 [ 259.677897][T25278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.697603][T25278] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 259.706160][T25278] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 259.714146][T25278] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 259.722102][T25278] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 259.730069][T25278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.738314][T25278] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 259.763524][T25261] loop3: detected capacity change from 0 to 4 02:47:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="260000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:05 executing program 2 (fault-call:7 fault-nth:40): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:05 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="2321202e54fdd0c85b2f66696c6530205e142020402b295c23402d5c3a7b3a2d20717565756530283a7a5c00206e65742f7463703600200020401a298e0affc7dab10be38efdb305334cd6db1c157b50ce745075194643b3db687b55eb200950be20392da6cef1a503c1c1125f2b6f0a37d7b37f349ceaf6eab3febee457170f938d73686625c9a8f3da2f2f035b1d9f77ec3552227f2b6cd186f9d3ec3ff6274c575263be04f9a1093b93f6ef0995749bdb1e145e1108d25218bf80"], 0xbe) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x9, 0x305, 0x0, 'queue0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x400, 0x0) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/131, 0x83}], 0x3, 0x9, 0x100) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000140)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(r4, &(0x7f0000000600)=@ieee802154={0x24, @long}, &(0x7f0000000680)=0x80) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/97, 0x61}], 0x1, 0xffff0001, 0x1e) write$sndseq(r2, &(0x7f0000000100)=[{0x2c, 0x5, 0x9, 0x5, @time={0x1, 0x3}, {0x9, 0x2}, {0x80, 0x3}, @raw8={"fc6138b6ecf5d57652d2b747"}}, {0x3, 0x26, 0x0, 0x7f, @time={0xfffffff8, 0x1}, {0x7, 0x3f}, {0x1, 0x40}, @quote={{0x7, 0x1}, 0x41, &(0x7f00000000c0)={0x40, 0x80, 0x9, 0xff, @time={0x1, 0x7}, {0x5e, 0x48}, {0x0, 0x20}, @addr={0x3f}}}}], 0x38) r5 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x9, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x80082407, 0xf04a00) mmap(&(0x7f0000324000/0x2000)=nil, 0x2000, 0x0, 0x150, 0xffffffffffffffff, 0xb6f74000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000240)={0x7ff, 0x401, 0xeee, 0x5, 0x200, 0xca}) [ 259.803717][T25261] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.816410][T25281] loop4: detected capacity change from 0 to 4 [ 259.828599][T25267] loop0: detected capacity change from 0 to 4 [ 259.862601][T25281] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.864400][T25299] FAULT_INJECTION: forcing a failure. [ 259.864400][T25299] name failslab, interval 1, probability 0, space 0, times 0 [ 259.871957][T25267] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.894900][T25299] CPU: 0 PID: 25299 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 259.903765][T25299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.904092][T25298] loop5: detected capacity change from 0 to 4 [ 259.913820][T25299] Call Trace: [ 259.913831][T25299] dump_stack+0x137/0x19d [ 259.913853][T25299] should_fail+0x23c/0x250 [ 259.913867][T25299] __should_failslab+0x81/0x90 [ 259.913887][T25299] ? io_req_defer+0x19c/0x470 [ 259.941171][T25298] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 259.941506][T25299] should_failslab+0x5/0x20 [ 259.955352][T25299] kmem_cache_alloc_trace+0x49/0x320 [ 259.960650][T25299] ? io_req_defer_prep+0x218/0x440 [ 259.965765][T25299] io_req_defer+0x19c/0x470 [ 259.970336][T25299] io_queue_sqe+0x18/0x160 [ 259.974767][T25299] io_submit_sqe+0x15c7/0x30c0 [ 259.979546][T25299] ? kmem_cache_alloc_bulk+0x239/0x380 [ 259.985109][T25299] io_submit_sqes+0x61f/0xaf0 [ 259.989790][T25299] __se_sys_io_uring_enter+0x217/0xb20 [ 259.995256][T25299] ? fput+0x2d/0x130 [ 259.999158][T25299] __x64_sys_io_uring_enter+0x74/0x80 [ 260.004536][T25299] do_syscall_64+0x34/0x50 [ 260.009108][T25299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.015008][T25299] RIP: 0033:0x466459 [ 260.018900][T25299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.039315][T25299] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 260.047815][T25299] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 260.055791][T25299] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:05 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 260.063763][T25299] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.071736][T25299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.079709][T25299] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 260.119765][T25298] loop5: detected capacity change from 0 to 4 [ 260.135207][T25281] loop4: detected capacity change from 0 to 4 [ 260.145285][T25314] loop3: detected capacity change from 0 to 4 [ 260.156650][T25298] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:05 executing program 2 (fault-call:7 fault-nth:41): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 260.164104][T25314] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.166295][T25325] loop0: detected capacity change from 0 to 4 [ 260.176255][T25281] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:05 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="290000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200f00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 260.257144][T25325] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.283692][T25335] FAULT_INJECTION: forcing a failure. [ 260.283692][T25335] name failslab, interval 1, probability 0, space 0, times 0 [ 260.288314][T25340] loop5: detected capacity change from 0 to 4 [ 260.296399][T25335] CPU: 0 PID: 25335 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 260.311161][T25335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.321228][T25335] Call Trace: [ 260.324523][T25335] dump_stack+0x137/0x19d [ 260.328959][T25335] should_fail+0x23c/0x250 [ 260.333453][T25335] __should_failslab+0x81/0x90 [ 260.338196][T25335] ? io_req_defer_prep+0xd9/0x440 [ 260.343206][T25335] should_failslab+0x5/0x20 [ 260.347694][T25335] __kmalloc+0x66/0x360 [ 260.351899][T25335] io_req_defer_prep+0xd9/0x440 [ 260.356811][T25335] io_req_defer+0x157/0x470 [ 260.361301][T25335] io_queue_sqe+0x18/0x160 [ 260.365702][T25335] io_submit_sqe+0x15c7/0x30c0 [ 260.370518][T25335] ? kmem_cache_alloc_bulk+0x239/0x380 [ 260.376744][T25335] io_submit_sqes+0x61f/0xaf0 [ 260.381405][T25335] __se_sys_io_uring_enter+0x217/0xb20 [ 260.386855][T25335] ? fput+0x2d/0x130 [ 260.390801][T25335] __x64_sys_io_uring_enter+0x74/0x80 [ 260.396291][T25335] do_syscall_64+0x34/0x50 [ 260.400704][T25335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.406589][T25335] RIP: 0033:0x466459 [ 260.410536][T25335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.430416][T25335] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 260.438811][T25335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 260.446775][T25335] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:05 executing program 2 (fault-call:7 fault-nth:42): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 260.454880][T25335] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.462834][T25335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.470784][T25335] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 260.484544][T25342] loop4: detected capacity change from 0 to 4 [ 260.490353][T25343] loop3: detected capacity change from 0 to 4 [ 260.497913][T25342] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.514042][T25340] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.524704][T25325] loop0: detected capacity change from 0 to 4 [ 260.531627][T25355] FAULT_INJECTION: forcing a failure. [ 260.531627][T25355] name failslab, interval 1, probability 0, space 0, times 0 [ 260.544331][T25355] CPU: 0 PID: 25355 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 260.552949][T25325] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.553557][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.553570][T25355] Call Trace: [ 260.553576][T25355] dump_stack+0x137/0x19d [ 260.563404][T25343] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.572889][T25355] should_fail+0x23c/0x250 [ 260.572911][T25355] __should_failslab+0x81/0x90 [ 260.572932][T25355] ? io_req_defer+0x19c/0x470 [ 260.604063][T25355] should_failslab+0x5/0x20 [ 260.608567][T25355] kmem_cache_alloc_trace+0x49/0x320 [ 260.613905][T25355] ? io_req_defer_prep+0x218/0x440 [ 260.619019][T25355] io_req_defer+0x19c/0x470 [ 260.623522][T25355] io_queue_sqe+0x18/0x160 [ 260.628014][T25355] io_submit_sqe+0x15c7/0x30c0 [ 260.632790][T25355] ? kmem_cache_alloc_bulk+0x239/0x380 [ 260.638245][T25355] io_submit_sqes+0x61f/0xaf0 [ 260.643026][T25355] __se_sys_io_uring_enter+0x217/0xb20 [ 260.648477][T25355] ? fput+0x2d/0x130 [ 260.652490][T25355] __x64_sys_io_uring_enter+0x74/0x80 [ 260.657850][T25355] do_syscall_64+0x34/0x50 02:47:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r2, &(0x7f0000002580)="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", 0xff, 0x24004004, &(0x7f0000001340)={0xa, 0x4e21, 0x9d, @local, 0x80}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept4$inet6(r1, &(0x7f00000012c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001300)=0x1c, 0x80800) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv2(r3, &(0x7f0000001240)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000080)=""/174, 0xa3}, {&(0x7f0000000140)=""/83, 0x53}], 0x5, 0xb8, 0x1000000, 0x10) preadv(r3, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 260.662337][T25355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.668227][T25355] RIP: 0033:0x466459 [ 260.672159][T25355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.691752][T25355] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 260.700182][T25355] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3d0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:06 executing program 2 (fault-call:7 fault-nth:43): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201100008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 260.708145][T25355] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 260.716131][T25355] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 260.724096][T25355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.732204][T25355] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 260.754680][T25340] loop5: detected capacity change from 0 to 4 [ 260.774235][T25342] loop4: detected capacity change from 0 to 4 [ 260.784315][T25340] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.804697][T25342] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 260.829320][T25382] FAULT_INJECTION: forcing a failure. [ 260.829320][T25382] name failslab, interval 1, probability 0, space 0, times 0 [ 260.843128][T25382] CPU: 0 PID: 25382 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 260.851916][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.861973][T25382] Call Trace: [ 260.865238][T25382] dump_stack+0x137/0x19d [ 260.869687][T25382] should_fail+0x23c/0x250 [ 260.870583][T25380] loop0: detected capacity change from 0 to 4 [ 260.874112][T25382] __should_failslab+0x81/0x90 [ 260.874139][T25382] ? io_req_defer_prep+0xd9/0x440 [ 260.874177][T25382] should_failslab+0x5/0x20 [ 260.874197][T25382] __kmalloc+0x66/0x360 [ 260.898870][T25382] io_req_defer_prep+0xd9/0x440 [ 260.903811][T25382] io_req_defer+0x157/0x470 [ 260.908323][T25382] io_queue_sqe+0x18/0x160 [ 260.912743][T25382] io_submit_sqe+0x15c7/0x30c0 [ 260.917557][T25382] ? kmem_cache_alloc_bulk+0x239/0x380 [ 260.923045][T25382] io_submit_sqes+0x61f/0xaf0 [ 260.927763][T25382] __se_sys_io_uring_enter+0x217/0xb20 [ 260.933217][T25382] ? fput+0x2d/0x130 [ 260.937161][T25382] __x64_sys_io_uring_enter+0x74/0x80 [ 260.942690][T25382] do_syscall_64+0x34/0x50 [ 260.947151][T25382] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 260.953144][T25382] RIP: 0033:0x466459 [ 260.957126][T25382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 260.976842][T25382] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 260.985245][T25382] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 260.993219][T25382] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 261.001323][T25382] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.009296][T25382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.017271][T25382] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 261.027682][T25378] loop3: detected capacity change from 0 to 4 [ 261.038006][T25380] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.038092][T25378] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:06 executing program 2 (fault-call:7 fault-nth:44): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 261.098007][T25380] loop0: detected capacity change from 0 to 4 [ 261.099375][T25396] loop5: detected capacity change from 0 to 4 [ 261.104299][T25398] loop4: detected capacity change from 0 to 4 [ 261.124671][T25380] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.124814][T25378] loop3: detected capacity change from 0 to 4 [ 261.141994][T25396] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.151970][T25398] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.163805][T25378] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.172552][T25416] FAULT_INJECTION: forcing a failure. [ 261.172552][T25416] name failslab, interval 1, probability 0, space 0, times 0 [ 261.185920][T25416] CPU: 1 PID: 25416 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 261.194671][T25416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.204804][T25416] Call Trace: [ 261.208088][T25416] dump_stack+0x137/0x19d [ 261.212413][T25416] should_fail+0x23c/0x250 [ 261.216911][T25416] __should_failslab+0x81/0x90 [ 261.221699][T25416] ? io_req_defer+0x19c/0x470 [ 261.226384][T25416] should_failslab+0x5/0x20 [ 261.230899][T25416] kmem_cache_alloc_trace+0x49/0x320 [ 261.236163][T25416] ? io_req_defer_prep+0x218/0x440 [ 261.241320][T25416] io_req_defer+0x19c/0x470 [ 261.245805][T25416] io_queue_sqe+0x18/0x160 [ 261.250244][T25416] io_submit_sqe+0x15c7/0x30c0 [ 261.255089][T25416] ? kmem_cache_alloc_bulk+0x239/0x380 [ 261.260530][T25416] io_submit_sqes+0x61f/0xaf0 [ 261.265191][T25416] __se_sys_io_uring_enter+0x217/0xb20 [ 261.270661][T25416] ? fput+0x2d/0x130 [ 261.274576][T25416] __x64_sys_io_uring_enter+0x74/0x80 [ 261.279967][T25416] do_syscall_64+0x34/0x50 [ 261.284431][T25416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.290321][T25416] RIP: 0033:0x466459 [ 261.294196][T25416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.313958][T25416] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 261.322533][T25416] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 261.330589][T25416] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 261.338546][T25416] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:06 executing program 2 (fault-call:7 fault-nth:45): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 261.346497][T25416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.354448][T25416] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 261.382346][T25396] loop5: detected capacity change from 0 to 4 02:47:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 261.404887][T25396] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.406373][T25398] loop4: detected capacity change from 0 to 4 [ 261.424927][T25398] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.428166][T25425] FAULT_INJECTION: forcing a failure. [ 261.428166][T25425] name failslab, interval 1, probability 0, space 0, times 0 [ 261.447115][T25425] CPU: 1 PID: 25425 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 261.448311][T25429] loop0: detected capacity change from 0 to 4 [ 261.455875][T25425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.455890][T25425] Call Trace: [ 261.455897][T25425] dump_stack+0x137/0x19d [ 261.455919][T25425] should_fail+0x23c/0x250 [ 261.463718][T25429] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.472025][T25425] __should_failslab+0x81/0x90 [ 261.472053][T25425] ? io_req_defer_prep+0xd9/0x440 [ 261.503183][T25425] should_failslab+0x5/0x20 [ 261.507670][T25425] __kmalloc+0x66/0x360 [ 261.511973][T25425] io_req_defer_prep+0xd9/0x440 [ 261.516992][T25425] io_req_defer+0x157/0x470 [ 261.521553][T25425] io_queue_sqe+0x18/0x160 [ 261.525986][T25425] io_submit_sqe+0x15c7/0x30c0 [ 261.530733][T25425] ? kmem_cache_alloc_bulk+0x239/0x380 [ 261.536509][T25425] io_submit_sqes+0x61f/0xaf0 [ 261.541177][T25425] __se_sys_io_uring_enter+0x217/0xb20 [ 261.546786][T25425] ? fput+0x2d/0x130 02:47:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) socketpair(0xf, 0x6, 0x7fffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r1, &(0x7f0000000040)=""/83, 0x53, 0x20, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5a9}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 261.550783][T25425] __x64_sys_io_uring_enter+0x74/0x80 [ 261.556217][T25425] do_syscall_64+0x34/0x50 [ 261.560638][T25425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.566614][T25425] RIP: 0033:0x466459 [ 261.570717][T25425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.590805][T25425] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '!}-'}, {0x20, 'net/tcp6\x00'}, {0x20, '\x00'}, {0x20, 'net/tcp6\x00'}, {}, {0x20, '/+'}], 0xa, "04b5ce0fa90aa2a0c0b5efdbdecf5ed709b08d8876c3b5f1b2031cbc87e288b5cd73e82548dc60064ba4d11360a805e4161a294a542186b87f90fceeeb379e93d54bb4ffaf18756aa15c93f21a4507cef56266c26e6409b363349b9b4b5a03fda9145324b69d041e072f"}, 0x93) 02:47:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 261.599393][T25425] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 261.607498][T25425] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 261.615481][T25425] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.623496][T25425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.631475][T25425] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201100008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:06 executing program 2 (fault-call:7 fault-nth:46): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 261.653016][T25429] loop0: detected capacity change from 0 to 4 [ 261.659655][T25429] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.708465][T25448] loop5: detected capacity change from 0 to 4 [ 261.718047][T25456] FAULT_INJECTION: forcing a failure. [ 261.718047][T25456] name failslab, interval 1, probability 0, space 0, times 0 [ 261.730845][T25456] CPU: 1 PID: 25456 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 261.739624][T25456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.750058][T25456] Call Trace: [ 261.753331][T25456] dump_stack+0x137/0x19d [ 261.757670][T25456] should_fail+0x23c/0x250 [ 261.762166][T25456] __should_failslab+0x81/0x90 [ 261.767112][T25456] ? io_req_defer+0x19c/0x470 [ 261.772510][T25456] should_failslab+0x5/0x20 [ 261.776999][T25456] kmem_cache_alloc_trace+0x49/0x320 [ 261.782552][T25456] ? io_req_defer_prep+0x218/0x440 [ 261.790870][T25456] io_req_defer+0x19c/0x470 [ 261.795549][T25456] io_queue_sqe+0x18/0x160 [ 261.800244][T25456] io_submit_sqe+0x15c7/0x30c0 [ 261.805093][T25456] ? kmem_cache_alloc_bulk+0x239/0x380 [ 261.811583][T25456] io_submit_sqes+0x61f/0xaf0 [ 261.816285][T25456] __se_sys_io_uring_enter+0x217/0xb20 [ 261.821931][T25456] ? fput+0x2d/0x130 [ 261.825933][T25456] __x64_sys_io_uring_enter+0x74/0x80 [ 261.831308][T25456] do_syscall_64+0x34/0x50 [ 261.835789][T25456] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.841813][T25456] RIP: 0033:0x466459 [ 261.845695][T25456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.865679][T25456] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 261.874987][T25456] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 261.883033][T25456] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 261.891085][T25456] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 261.899191][T25456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:07 executing program 2 (fault-call:7 fault-nth:47): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 261.907923][T25456] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 261.921215][T25448] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.948500][T25461] loop3: detected capacity change from 0 to 4 02:47:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 261.966782][T25468] loop0: detected capacity change from 0 to 4 [ 261.974527][T25468] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 261.995010][T25461] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.005697][T25458] loop4: detected capacity change from 0 to 4 [ 262.006531][T25475] FAULT_INJECTION: forcing a failure. [ 262.006531][T25475] name failslab, interval 1, probability 0, space 0, times 0 [ 262.028296][T25475] CPU: 1 PID: 25475 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 262.038232][T25475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.048487][T25475] Call Trace: [ 262.051810][T25475] dump_stack+0x137/0x19d [ 262.056149][T25475] should_fail+0x23c/0x250 [ 262.060624][T25475] __should_failslab+0x81/0x90 [ 262.065436][T25475] ? io_req_defer_prep+0xd9/0x440 [ 262.070458][T25475] should_failslab+0x5/0x20 [ 262.075387][T25475] __kmalloc+0x66/0x360 [ 262.079554][T25475] io_req_defer_prep+0xd9/0x440 [ 262.084515][T25475] io_req_defer+0x157/0x470 [ 262.089366][T25475] io_queue_sqe+0x18/0x160 [ 262.093765][T25475] io_submit_sqe+0x15c7/0x30c0 [ 262.098615][T25475] ? kmem_cache_alloc_bulk+0x239/0x380 [ 262.104060][T25475] io_submit_sqes+0x61f/0xaf0 [ 262.109080][T25475] __se_sys_io_uring_enter+0x217/0xb20 [ 262.115089][T25475] ? fput+0x2d/0x130 [ 262.119237][T25475] __x64_sys_io_uring_enter+0x74/0x80 [ 262.124609][T25475] do_syscall_64+0x34/0x50 [ 262.129855][T25475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.135849][T25475] RIP: 0033:0x466459 [ 262.139939][T25475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.160971][T25475] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 262.169386][T25475] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 262.177557][T25475] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 262.185813][T25475] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.194133][T25475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.202227][T25475] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:07 executing program 2 (fault-call:7 fault-nth:48): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 262.223524][T25448] loop5: detected capacity change from 0 to 4 [ 262.229948][T25458] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.239511][T25483] loop0: detected capacity change from 0 to 4 [ 262.245794][T25448] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.255376][T25483] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.276891][T25461] loop3: detected capacity change from 0 to 4 [ 262.284014][T25461] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.298793][T25458] loop4: detected capacity change from 0 to 4 [ 262.300454][T25496] FAULT_INJECTION: forcing a failure. [ 262.300454][T25496] name failslab, interval 1, probability 0, space 0, times 0 [ 262.317818][T25496] CPU: 0 PID: 25496 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 262.324602][T25458] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.326582][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.326593][T25496] Call Trace: [ 262.326600][T25496] dump_stack+0x137/0x19d [ 262.354357][T25496] should_fail+0x23c/0x250 [ 262.358774][T25496] __should_failslab+0x81/0x90 [ 262.363523][T25496] ? io_req_defer+0x19c/0x470 [ 262.368198][T25496] should_failslab+0x5/0x20 [ 262.372713][T25496] kmem_cache_alloc_trace+0x49/0x320 [ 262.378029][T25496] ? io_req_defer_prep+0x218/0x440 [ 262.383199][T25496] io_req_defer+0x19c/0x470 [ 262.388034][T25496] io_queue_sqe+0x18/0x160 [ 262.392438][T25496] io_submit_sqe+0x15c7/0x30c0 [ 262.397275][T25496] ? kmem_cache_alloc_bulk+0x239/0x380 [ 262.402748][T25496] io_submit_sqes+0x61f/0xaf0 [ 262.408181][T25496] __se_sys_io_uring_enter+0x217/0xb20 [ 262.413985][T25496] ? fput+0x2d/0x130 [ 262.424707][T25496] __x64_sys_io_uring_enter+0x74/0x80 [ 262.430700][T25496] do_syscall_64+0x34/0x50 [ 262.435352][T25496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.441728][T25496] RIP: 0033:0x466459 [ 262.445602][T25496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.465801][T25496] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000400)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0x0, @local, 0x2}, {0xa, 0x4e23, 0x77, @private1={0xfc, 0x1, [], 0x1}, 0x1f}, 0xffff, [0x49, 0x40, 0x1, 0x1, 0x8, 0x13d, 0x240000, 0x8]}, 0x5c) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000003c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @remote}, 0x10) 02:47:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="410000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:07 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="320000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:07 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 262.474236][T25496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 262.482390][T25496] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 262.490406][T25496] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.498439][T25496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.506403][T25496] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:07 executing program 2 (fault-call:7 fault-nth:49): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 262.584351][T25515] loop0: detected capacity change from 0 to 4 [ 262.586603][T25518] loop5: detected capacity change from 0 to 4 [ 262.596015][T25526] FAULT_INJECTION: forcing a failure. [ 262.596015][T25526] name failslab, interval 1, probability 0, space 0, times 0 [ 262.596835][T25519] loop3: detected capacity change from 0 to 4 [ 262.609217][T25526] CPU: 1 PID: 25526 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 262.615422][T25520] loop4: detected capacity change from 0 to 4 [ 262.624102][T25526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.624116][T25526] Call Trace: [ 262.624123][T25526] dump_stack+0x137/0x19d [ 262.624143][T25526] should_fail+0x23c/0x250 [ 262.624157][T25526] __should_failslab+0x81/0x90 [ 262.656929][T25526] should_failslab+0x5/0x20 [ 262.661460][T25526] kmem_cache_alloc_bulk+0x40/0x380 [ 262.666656][T25526] io_submit_sqes+0x515/0xaf0 [ 262.671319][T25526] __se_sys_io_uring_enter+0x217/0xb20 [ 262.676858][T25526] ? fput+0x2d/0x130 [ 262.680829][T25526] __x64_sys_io_uring_enter+0x74/0x80 [ 262.686938][T25526] do_syscall_64+0x34/0x50 [ 262.691366][T25526] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.697305][T25526] RIP: 0033:0x466459 [ 262.701215][T25526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.721931][T25526] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 262.730324][T25526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 262.738276][T25526] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 262.746228][T25526] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 262.754232][T25526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.762209][T25526] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:08 executing program 2 (fault-call:7 fault-nth:50): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 262.778758][T25519] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.788248][T25520] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.797998][T25515] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.804724][T25518] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.833025][T25519] loop3: detected capacity change from 0 to 4 [ 262.839330][T25538] FAULT_INJECTION: forcing a failure. [ 262.839330][T25538] name failslab, interval 1, probability 0, space 0, times 0 [ 262.851982][T25538] CPU: 0 PID: 25538 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 262.852699][T25519] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 262.860836][T25538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.860851][T25538] Call Trace: [ 262.860859][T25538] dump_stack+0x137/0x19d [ 262.887773][T25538] should_fail+0x23c/0x250 [ 262.892193][T25538] __should_failslab+0x81/0x90 [ 262.896938][T25538] ? io_req_defer_prep+0xd9/0x440 [ 262.901988][T25538] should_failslab+0x5/0x20 [ 262.906520][T25538] __kmalloc+0x66/0x360 [ 262.910668][T25538] io_req_defer_prep+0xd9/0x440 [ 262.915505][T25538] io_req_defer+0x157/0x470 [ 262.919991][T25538] io_queue_sqe+0x18/0x160 [ 262.924461][T25538] io_submit_sqe+0x15c7/0x30c0 [ 262.929267][T25538] ? kmem_cache_alloc_bulk+0x239/0x380 [ 262.934801][T25538] io_submit_sqes+0x61f/0xaf0 [ 262.939488][T25538] __se_sys_io_uring_enter+0x217/0xb20 [ 262.945118][T25538] ? fput+0x2d/0x130 [ 262.949007][T25538] __x64_sys_io_uring_enter+0x74/0x80 [ 262.954369][T25538] do_syscall_64+0x34/0x50 [ 262.958905][T25538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.964794][T25538] RIP: 0033:0x466459 [ 262.968668][T25538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.988311][T25538] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 262.996705][T25538] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 263.004668][T25538] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 263.012619][T25538] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.020569][T25538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="330000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:08 executing program 2 (fault-call:7 fault-nth:51): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 263.028622][T25538] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="420000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 263.068598][T25520] loop4: detected capacity change from 0 to 4 [ 263.074919][T25515] loop0: detected capacity change from 0 to 4 [ 263.109772][T25555] loop3: detected capacity change from 0 to 4 [ 263.110215][T25549] loop5: detected capacity change from 0 to 4 [ 263.116471][T25560] FAULT_INJECTION: forcing a failure. [ 263.116471][T25560] name failslab, interval 1, probability 0, space 0, times 0 [ 263.134589][T25560] CPU: 1 PID: 25560 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 263.143392][T25560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.145881][T25549] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.153523][T25560] Call Trace: [ 263.153533][T25560] dump_stack+0x137/0x19d [ 263.153556][T25560] should_fail+0x23c/0x250 [ 263.174382][T25515] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.174888][T25560] __should_failslab+0x81/0x90 [ 263.188904][T25560] ? io_req_defer+0x19c/0x470 [ 263.193677][T25560] should_failslab+0x5/0x20 [ 263.198243][T25560] kmem_cache_alloc_trace+0x49/0x320 [ 263.203595][T25560] ? io_req_defer_prep+0x218/0x440 [ 263.208736][T25560] io_req_defer+0x19c/0x470 [ 263.213223][T25560] io_queue_sqe+0x18/0x160 [ 263.217674][T25560] io_submit_sqe+0x15c7/0x30c0 [ 263.222459][T25560] ? kmem_cache_alloc_bulk+0x239/0x380 [ 263.227898][T25560] io_submit_sqes+0x61f/0xaf0 [ 263.232563][T25560] __se_sys_io_uring_enter+0x217/0xb20 [ 263.238004][T25560] ? fput+0x2d/0x130 [ 263.241984][T25560] __x64_sys_io_uring_enter+0x74/0x80 [ 263.247369][T25560] do_syscall_64+0x34/0x50 [ 263.251769][T25560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.257645][T25560] RIP: 0033:0x466459 [ 263.261521][T25560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.281127][T25560] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 263.290387][T25560] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 263.298438][T25560] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:08 executing program 2 (fault-call:7 fault-nth:52): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:08 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1cc, 0x821d039f01d42468) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x49, 0x0, "574853fd5ea64d6389f200ee3f2df3638b64d489fcd10d3edc426fe9dc7110cf261c3a2c128780c06465f7574e36507f8803079ed51a24cdcf44ccd5cb6ee00e9930d93d6ac3886beab6180f7f4a9e11"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x2, 0x4) r2 = fork() r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)=0xa2) tkill(r2, 0x16) syz_open_procfs(r2, &(0x7f0000000040)='ns\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xf, r2, 0x8001, &(0x7f0000000100)="ba46b7f0caecee827477") preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 263.306388][T25560] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.314434][T25560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.322474][T25560] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 263.331075][T25520] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:08 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 263.403116][T25555] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.415756][T25549] loop5: detected capacity change from 0 to 4 [ 263.423617][T25549] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.437271][T25578] FAULT_INJECTION: forcing a failure. [ 263.437271][T25578] name failslab, interval 1, probability 0, space 0, times 0 [ 263.450184][T25578] CPU: 0 PID: 25578 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 263.458944][T25578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.469497][T25578] Call Trace: [ 263.473561][T25578] dump_stack+0x137/0x19d [ 263.477935][T25578] should_fail+0x23c/0x250 [ 263.482358][T25578] __should_failslab+0x81/0x90 [ 263.487137][T25578] ? io_req_defer_prep+0xd9/0x440 [ 263.492167][T25578] should_failslab+0x5/0x20 [ 263.496665][T25578] __kmalloc+0x66/0x360 [ 263.500823][T25578] io_req_defer_prep+0xd9/0x440 [ 263.505760][T25578] io_req_defer+0x157/0x470 [ 263.510338][T25578] io_queue_sqe+0x18/0x160 [ 263.514816][T25578] io_submit_sqe+0x15c7/0x30c0 [ 263.519616][T25578] ? kmem_cache_alloc_bulk+0x239/0x380 [ 263.525137][T25578] io_submit_sqes+0x61f/0xaf0 [ 263.529799][T25578] __se_sys_io_uring_enter+0x217/0xb20 [ 263.535256][T25578] ? fput+0x2d/0x130 [ 263.539139][T25578] __x64_sys_io_uring_enter+0x74/0x80 [ 263.544489][T25578] do_syscall_64+0x34/0x50 [ 263.548899][T25578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.554776][T25578] RIP: 0033:0x466459 [ 263.558660][T25578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.578600][T25578] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 263.587003][T25578] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 263.594955][T25578] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 263.602909][T25578] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.610866][T25578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.618835][T25578] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="340000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:08 executing program 2 (fault-call:7 fault-nth:53): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 263.649186][T25555] loop3: detected capacity change from 0 to 4 [ 263.670206][T25555] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.680008][T25588] loop0: detected capacity change from 0 to 4 [ 263.689758][T25592] loop5: detected capacity change from 0 to 4 [ 263.703753][T25598] FAULT_INJECTION: forcing a failure. [ 263.703753][T25598] name failslab, interval 1, probability 0, space 0, times 0 [ 263.716539][T25598] CPU: 1 PID: 25598 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 263.723662][T25592] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.725395][T25598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.725409][T25598] Call Trace: [ 263.725415][T25598] dump_stack+0x137/0x19d [ 263.740099][T25588] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.744862][T25598] should_fail+0x23c/0x250 [ 263.744884][T25598] __should_failslab+0x81/0x90 [ 263.744905][T25598] ? io_req_defer+0x19c/0x470 [ 263.775708][T25598] should_failslab+0x5/0x20 [ 263.780216][T25598] kmem_cache_alloc_trace+0x49/0x320 [ 263.785621][T25598] ? io_req_defer_prep+0x218/0x440 [ 263.790750][T25598] io_req_defer+0x19c/0x470 [ 263.795371][T25598] io_queue_sqe+0x18/0x160 [ 263.799769][T25598] io_submit_sqe+0x15c7/0x30c0 [ 263.804594][T25598] ? kmem_cache_alloc_bulk+0x239/0x380 [ 263.810040][T25598] io_submit_sqes+0x61f/0xaf0 [ 263.814720][T25598] __se_sys_io_uring_enter+0x217/0xb20 [ 263.820292][T25598] ? fput+0x2d/0x130 [ 263.824271][T25598] __x64_sys_io_uring_enter+0x74/0x80 [ 263.829674][T25598] do_syscall_64+0x34/0x50 [ 263.834161][T25598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.840091][T25598] RIP: 0033:0x466459 [ 263.843977][T25598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.863567][T25598] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 263.872056][T25598] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 263.880026][T25598] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 263.888015][T25598] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 263.895973][T25598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="430000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:09 executing program 2 (fault-call:7 fault-nth:54): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 263.903933][T25598] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 263.934460][T25602] loop4: detected capacity change from 0 to 4 [ 263.950299][T25588] loop0: detected capacity change from 0 to 4 [ 263.955779][T25592] loop5: detected capacity change from 0 to 4 [ 263.963675][T25592] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.973112][T25610] loop3: detected capacity change from 0 to 4 [ 263.980476][T25610] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.992082][T25602] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 263.992154][T25588] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 264.004990][T25621] FAULT_INJECTION: forcing a failure. [ 264.004990][T25621] name failslab, interval 1, probability 0, space 0, times 0 [ 264.024207][T25621] CPU: 0 PID: 25621 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 264.033040][T25621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.043271][T25621] Call Trace: [ 264.046717][T25621] dump_stack+0x137/0x19d [ 264.051035][T25621] should_fail+0x23c/0x250 [ 264.055446][T25621] __should_failslab+0x81/0x90 [ 264.060202][T25621] ? io_req_defer_prep+0xd9/0x440 [ 264.065447][T25621] should_failslab+0x5/0x20 [ 264.069944][T25621] __kmalloc+0x66/0x360 [ 264.074082][T25621] io_req_defer_prep+0xd9/0x440 [ 264.078993][T25621] io_req_defer+0x157/0x470 [ 264.083480][T25621] io_queue_sqe+0x18/0x160 [ 264.087900][T25621] io_submit_sqe+0x15c7/0x30c0 [ 264.092677][T25621] ? kmem_cache_alloc_bulk+0x239/0x380 [ 264.098162][T25621] io_submit_sqes+0x61f/0xaf0 [ 264.103177][T25621] __se_sys_io_uring_enter+0x217/0xb20 [ 264.108620][T25621] ? fput+0x2d/0x130 [ 264.112493][T25621] __x64_sys_io_uring_enter+0x74/0x80 [ 264.117894][T25621] do_syscall_64+0x34/0x50 [ 264.122290][T25621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.128225][T25621] RIP: 0033:0x466459 [ 264.132095][T25621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:09 executing program 2 (fault-call:7 fault-nth:55): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:09 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="350000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 264.152006][T25621] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 264.160408][T25621] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 264.168479][T25621] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 264.176432][T25621] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 264.184455][T25621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.192418][T25621] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 264.232633][T25602] loop4: detected capacity change from 0 to 4 [ 264.249506][T25602] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 264.254437][T25632] FAULT_INJECTION: forcing a failure. [ 264.254437][T25632] name failslab, interval 1, probability 0, space 0, times 0 [ 264.264492][T25629] loop5: detected capacity change from 0 to 4 [ 264.271432][T25632] CPU: 1 PID: 25632 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 264.271454][T25632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.271462][T25632] Call Trace: [ 264.271469][T25632] dump_stack+0x137/0x19d [ 264.271487][T25632] should_fail+0x23c/0x250 [ 264.271500][T25632] __should_failslab+0x81/0x90 [ 264.313754][T25632] ? io_req_defer+0x19c/0x470 [ 264.318438][T25632] should_failslab+0x5/0x20 [ 264.323248][T25632] kmem_cache_alloc_trace+0x49/0x320 [ 264.328514][T25632] ? io_req_defer_prep+0x218/0x440 [ 264.333618][T25632] io_req_defer+0x19c/0x470 [ 264.338124][T25632] io_queue_sqe+0x18/0x160 [ 264.342643][T25632] io_submit_sqe+0x15c7/0x30c0 [ 264.347398][T25632] ? kmem_cache_alloc_bulk+0x239/0x380 [ 264.352847][T25632] io_submit_sqes+0x61f/0xaf0 [ 264.357512][T25632] __se_sys_io_uring_enter+0x217/0xb20 [ 264.363019][T25632] ? fput+0x2d/0x130 [ 264.366897][T25632] __x64_sys_io_uring_enter+0x74/0x80 [ 264.372329][T25632] do_syscall_64+0x34/0x50 [ 264.376804][T25632] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.383047][T25632] RIP: 0033:0x466459 [ 264.387131][T25632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.407180][T25632] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 264.418958][T25632] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000007c0), &(0x7f0000000800)=0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r3 = socket$inet6(0xa, 0x6, 0x1) r4 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)}], 0x9, 0x0, 0x100) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x80082407, 0xf04a00) close(r4) r5 = dup(r3) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='&&#\x00', &(0x7f00000000c0)='^%\x00', 0x0) 02:47:09 executing program 2 (fault-call:7 fault-nth:56): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 264.426911][T25632] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 264.435164][T25632] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 264.443125][T25632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.451077][T25632] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 264.464741][T25629] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) ioctl$FIONCLEX(r2, 0x5450) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0x1000, 0x1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff9, @remote, 0x8}, 0x1c) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 264.522864][T25648] FAULT_INJECTION: forcing a failure. [ 264.522864][T25648] name failslab, interval 1, probability 0, space 0, times 0 [ 264.535806][T25648] CPU: 0 PID: 25648 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 264.544660][T25648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.554719][T25648] Call Trace: [ 264.558010][T25648] dump_stack+0x137/0x19d [ 264.562325][T25648] should_fail+0x23c/0x250 [ 264.566724][T25648] __should_failslab+0x81/0x90 [ 264.571476][T25648] ? io_req_defer_prep+0xd9/0x440 [ 264.576499][T25648] should_failslab+0x5/0x20 [ 264.580986][T25648] __kmalloc+0x66/0x360 [ 264.585185][T25648] io_req_defer_prep+0xd9/0x440 [ 264.590247][T25648] io_req_defer+0x157/0x470 [ 264.594802][T25648] io_queue_sqe+0x18/0x160 [ 264.599214][T25648] io_submit_sqe+0x15c7/0x30c0 [ 264.604024][T25648] ? kmem_cache_alloc_bulk+0x239/0x380 [ 264.609573][T25648] io_submit_sqes+0x61f/0xaf0 [ 264.614344][T25648] __se_sys_io_uring_enter+0x217/0xb20 [ 264.619975][T25648] ? fput+0x2d/0x130 [ 264.623907][T25648] __x64_sys_io_uring_enter+0x74/0x80 [ 264.629704][T25648] do_syscall_64+0x34/0x50 [ 264.634186][T25648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.640070][T25648] RIP: 0033:0x466459 [ 264.644032][T25648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.663746][T25648] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="440000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 264.672417][T25648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 264.680492][T25648] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 264.688823][T25648] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 264.697126][T25648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.705102][T25648] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:10 executing program 2 (fault-call:7 fault-nth:57): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 264.733767][T25642] loop4: detected capacity change from 0 to 4 [ 264.753502][T25642] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 264.778588][T25629] loop5: detected capacity change from 0 to 4 [ 264.784254][T25671] FAULT_INJECTION: forcing a failure. [ 264.784254][T25671] name failslab, interval 1, probability 0, space 0, times 0 [ 264.797307][T25671] CPU: 1 PID: 25671 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 264.797945][T25629] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 264.808545][T25671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.822946][T25656] loop0: detected capacity change from 0 to 4 [ 264.828792][T25671] Call Trace: [ 264.828802][T25671] dump_stack+0x137/0x19d [ 264.842593][T25656] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 264.842928][T25671] should_fail+0x23c/0x250 [ 264.858044][T25671] __should_failslab+0x81/0x90 [ 264.863263][T25671] ? io_req_defer+0x19c/0x470 [ 264.870108][T25671] should_failslab+0x5/0x20 [ 264.872407][T25674] loop3: detected capacity change from 0 to 4 [ 264.875019][T25671] kmem_cache_alloc_trace+0x49/0x320 [ 264.875045][T25671] ? io_req_defer_prep+0x218/0x440 [ 264.893802][T25671] io_req_defer+0x19c/0x470 [ 264.898552][T25671] io_queue_sqe+0x18/0x160 [ 264.903203][T25671] io_submit_sqe+0x15c7/0x30c0 [ 264.915276][T25671] ? kmem_cache_alloc_bulk+0x239/0x380 [ 264.920818][T25671] io_submit_sqes+0x61f/0xaf0 [ 264.925791][T25671] __se_sys_io_uring_enter+0x217/0xb20 [ 264.931338][T25671] ? fput+0x2d/0x130 [ 264.935339][T25671] __x64_sys_io_uring_enter+0x74/0x80 [ 264.940774][T25671] do_syscall_64+0x34/0x50 [ 264.945336][T25671] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.951361][T25671] RIP: 0033:0x466459 [ 264.955238][T25671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.975205][T25671] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:10 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="360000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:10 executing program 2 (fault-call:7 fault-nth:58): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 264.983700][T25671] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 264.992891][T25671] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 265.000973][T25671] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 265.009210][T25671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.017203][T25671] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 265.061819][T25685] FAULT_INJECTION: forcing a failure. [ 265.061819][T25685] name failslab, interval 1, probability 0, space 0, times 0 [ 265.075550][T25685] CPU: 1 PID: 25685 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 265.080050][T25674] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.084402][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.084415][T25685] Call Trace: [ 265.084422][T25685] dump_stack+0x137/0x19d [ 265.117086][T25685] should_fail+0x23c/0x250 [ 265.120546][T25656] loop0: detected capacity change from 0 to 4 [ 265.122048][T25685] __should_failslab+0x81/0x90 [ 265.122070][T25685] ? io_req_defer_prep+0xd9/0x440 [ 265.132198][T25642] loop4: detected capacity change from 0 to 4 [ 265.136763][T25685] should_failslab+0x5/0x20 [ 265.136793][T25685] __kmalloc+0x66/0x360 [ 265.136812][T25685] io_req_defer_prep+0xd9/0x440 [ 265.163569][T25685] io_req_defer+0x157/0x470 [ 265.168688][T25685] io_queue_sqe+0x18/0x160 [ 265.173143][T25685] io_submit_sqe+0x15c7/0x30c0 [ 265.178290][T25685] ? kmem_cache_alloc_bulk+0x239/0x380 [ 265.184219][T25685] io_submit_sqes+0x61f/0xaf0 [ 265.188989][T25685] __se_sys_io_uring_enter+0x217/0xb20 [ 265.194671][T25685] ? fput+0x2d/0x130 [ 265.200477][T25685] __x64_sys_io_uring_enter+0x74/0x80 [ 265.205937][T25685] do_syscall_64+0x34/0x50 [ 265.210371][T25685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.217491][T25685] RIP: 0033:0x466459 [ 265.221377][T25685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.243832][T25685] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 265.252494][T25685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 265.260799][T25685] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 265.269592][T25685] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 265.277824][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.286609][T25685] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:10 executing program 2 (fault-call:7 fault-nth:59): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 265.310709][T25691] loop5: detected capacity change from 0 to 4 [ 265.320983][T25642] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.332355][T25674] loop3: detected capacity change from 0 to 4 [ 265.339020][T25674] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 265.355968][T25656] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.360098][T25691] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.374620][T25702] FAULT_INJECTION: forcing a failure. [ 265.374620][T25702] name failslab, interval 1, probability 0, space 0, times 0 [ 265.389759][T25702] CPU: 0 PID: 25702 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 265.398621][T25702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.408757][T25702] Call Trace: [ 265.412040][T25702] dump_stack+0x137/0x19d [ 265.416953][T25702] should_fail+0x23c/0x250 [ 265.423238][T25702] __should_failslab+0x81/0x90 [ 265.429284][T25702] ? io_req_defer+0x19c/0x470 [ 265.434435][T25702] should_failslab+0x5/0x20 [ 265.440685][T25702] kmem_cache_alloc_trace+0x49/0x320 [ 265.446441][T25702] ? io_req_defer_prep+0x218/0x440 [ 265.451904][T25702] io_req_defer+0x19c/0x470 [ 265.457457][T25702] io_queue_sqe+0x18/0x160 [ 265.462064][T25702] io_submit_sqe+0x15c7/0x30c0 [ 265.466925][T25702] ? kmem_cache_alloc_bulk+0x239/0x380 [ 265.473808][T25702] io_submit_sqes+0x61f/0xaf0 [ 265.478613][T25702] __se_sys_io_uring_enter+0x217/0xb20 [ 265.484272][T25702] ? fput+0x2d/0x130 [ 265.489403][T25702] __x64_sys_io_uring_enter+0x74/0x80 [ 265.495238][T25702] do_syscall_64+0x34/0x50 [ 265.500057][T25702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.507161][T25702] RIP: 0033:0x466459 [ 265.511576][T25702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.531540][T25702] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 265.540050][T25702] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 265.551024][T25702] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:10 executing program 2 (fault-call:7 fault-nth:60): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 265.559177][T25702] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 265.568357][T25702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.576496][T25702] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="450000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 265.627015][T25691] loop5: detected capacity change from 0 to 4 [ 265.634555][T25691] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.645321][T25711] FAULT_INJECTION: forcing a failure. [ 265.645321][T25711] name failslab, interval 1, probability 0, space 0, times 0 [ 265.660075][T25711] CPU: 0 PID: 25711 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 265.669406][T25711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.679591][T25711] Call Trace: [ 265.682345][T25712] loop4: detected capacity change from 0 to 4 [ 265.683040][T25711] dump_stack+0x137/0x19d [ 265.693955][T25711] should_fail+0x23c/0x250 [ 265.698372][T25711] __should_failslab+0x81/0x90 [ 265.703149][T25711] ? io_req_defer_prep+0xd9/0x440 [ 265.708274][T25711] should_failslab+0x5/0x20 [ 265.712934][T25711] __kmalloc+0x66/0x360 [ 265.717099][T25711] io_req_defer_prep+0xd9/0x440 [ 265.721937][T25711] io_req_defer+0x157/0x470 [ 265.726430][T25711] io_queue_sqe+0x18/0x160 [ 265.730846][T25711] io_submit_sqe+0x15c7/0x30c0 [ 265.735623][T25711] ? kmem_cache_alloc_bulk+0x239/0x380 [ 265.741142][T25711] io_submit_sqes+0x61f/0xaf0 [ 265.745929][T25711] __se_sys_io_uring_enter+0x217/0xb20 [ 265.751370][T25711] ? fput+0x2d/0x130 [ 265.755248][T25711] __x64_sys_io_uring_enter+0x74/0x80 [ 265.760621][T25711] do_syscall_64+0x34/0x50 [ 265.765421][T25711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.771584][T25711] RIP: 0033:0x466459 [ 265.775480][T25711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.795265][T25711] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 265.803755][T25711] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 265.811889][T25711] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 265.819863][T25711] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="5e7fb459", 0x4}, {&(0x7f0000000340)="3f6969b80f11fcde89fafd485572ad7aad076ad0641cfb16b6a06af495633bc2dda828df467e7b2afccca495080140912b1537d893a3369e1b515923371c0c6e97ef129faba23e6eef1a944b8fda77c84d696034e5fa98de4e6fb54e9e382e9672219d85b4dfeb39dbf16f67c9a5d3c5166ba8bf6c37978ac3ca02f4e2b28204a1c7e44e5b605caedd53cd98d73619b89d8895b1bb0240ee688aaf387217e2496c09de", 0xa3}, {&(0x7f0000000400)="6cd1613ef571da668e10a0b573b662ba226ce6b17cc4142e58fc54fa2abe6976e68c5168b52401ed8ca333e5e2320c9d834d307a32a439c0e194eba8853f23d68ec631d870eac867c62590de3903d060b0f5056fd15df921536a953f8aaa45738e89952071e362c366cdd56b71df2ba34b95e64640f4e0104b7bc2afd5f65ee88d0bb793c2ba3f", 0x87}, {&(0x7f00000004c0)="0c66a8800fd2", 0x6}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e6273533552b2116f10600000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x8000}, 0x8000) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x80082407, 0xf04a00) r6 = socket(0x1e, 0x1, 0x6) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001300)='/proc/thread-self\x00', 0xc0480, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x80082407, 0xf04a00) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x80082407, 0xf04a00) r10 = accept$packet(r1, &(0x7f0000003900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003940)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c00)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000080)="52e5448bfdc686a59f0c7428c6c95cea480e89564dabe0d1da6f3cc1cc2fd87eb571c3b50f052aca158cc3cf656daf74a60e64748492cb21006d8df2e4f44c25790e0be9ce611e56dc", 0x49}, {&(0x7f0000000100)="6596ba7564fd0dff629524474d3a070f500725e972f03dceeb5a8dc4827c3d4edc2d7c4c7c0369c1cbf79aed30bda00bc5a34151655d569a28e9ea338c7f1b6642bf20b987db89bdef86fc993efd88953ff5f0586980d6bca50fb5920111c490f3c1e8cb3557dff7f57c2048b4779c180237a67050e0509fe1b2ec6a5cf83fe4b82f0bffdc7b2ea459602f4c8c236157747e22aa0f3b202175fdbc46f48c2f4c63ffcd1e2ff157ac9b090f324a5f7c489bfaf193c3a383979d6a334410683035680e2ce5be9fe583c3bc5a9792f7c89a5851971e31147d5013ab447cfb527afd7f783d352ec9a66e54628a1fc804", 0xee}, {&(0x7f0000000240)="7283741d934179fcc94433233cf312d10c6c8809eaf2e837ff441daca86eeae5b98c820935daf2635b46cd4c39b520c104bc90ea9670404773ff4317e0ab61aee8bd9c62c527d337951b1ba82e00192fc232d11e4c9aa52158f2a3646f55edc362e58e26d80706fc2ae7cce1f1b610c6247513ec7506a2ad7236ef03813d8344751244306773cd3782e3d34f9cf528ec9b9b9291aa114b554232fd902322144aae761d185ab77709ba8250b5651887f6b093c30de817be1d41f18a4cbb", 0xbd}, {&(0x7f0000000300)="3248167ac4bed095cd4b9118b3064f07e2cd9b2dcfff28520f3e88256b6e4273baa1587e9868a7751d50d5ed4e8b56c075f5548b3ff14e78f0347aaa420066258860102037a56a99672e8023aa8fd4929e5eea7ab1c6cd7e07148c8e715c6eac4655be6e4e76f0afbda5e32a20d035b342a3d490928c279d432d203d89fa82509a827102ad4b7f46723e14d0dbaf10cf5e5d63aac73aab6502b61b893620e50e7ce8acdf293568073fafcf1a655dbb847dd84a8b33d8699c21713506e9010617eb0de7042a44f2fc3b37b86c40cf1a", 0xcf}, {&(0x7f0000000400)="8f4899283fc4d26f1490f0a7bbcc2eed01efe84539343f76be7dab8a64d46a68fef8a117a7fd0554c04d3efa577ce709fc43e3a5bdced2d4f39b114c3dc3b7fd7d6d5abbb34db515ff09b4cb0987ad521d7c7d6ee0da3f7a9a81645027717eba7ed3ad3dc207a569dcf84ea600d4e21f0490ac61674c35372806da8f6365f3a68f0178e34173a99a79e0a0f32bcf8431218dfd486337b14b24f5bea6c57dd82b135e54d139ad0a5437dbf3bb28864b61d5e90ee39fd3e2c02973b78679fa8dd0b13a", 0xc2}, {&(0x7f0000000500)="e2d092061883ce6c8252d27af7eb413675a936da587c49f2f17a05f296d2126d684b5d5c77885043741100e27f65263bc5e2efbe6ebc0ac20ad47cf87d746a8c65fb7f4f9817a17e026e5d24546f6d60d4e0ed1842910ad67eff000b4e8a8e669227e3db2dd3994dc6baf98ed600a814d1e5d236b2034ec17cf1fbf6714a85523005c1d774d99491b2d5fc2ee5e027f3363189659bfeddb8a42340e4c88dc9", 0x9f}, {&(0x7f00000005c0)="3d0abea3799ad6e79bd2d88b24", 0xd}, {&(0x7f0000000600)="f51f4210d69db167a52ceda86a7ea93ebf83e44fdb5f96ad092153bf49780ebe3ab22ce7f0fa0d9c205ff08c259b737639718f64001a7f1e31aaacc6fc4756fddf428666497b9d7ca0ed15da5d5c8f075c6a6b731dac025b9ef0e8e013b5071151b6b1a858600be03c4d2bbdb9bf3d8936c44bb4ebf538463974400cc2c22a0d2f887d47be048618e5", 0x89}, {&(0x7f0000001580)="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", 0x1000}], 0x9, 0x0, 0x0, 0x20004084}, {&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000800)="9b423bdb8fa272ae4ed0b0751b77f98043c0c03f7fe53b9887c06df417e94928341618311d8f7db250ce3ff2b29fb8b542ebad0fce67b2f633d6255b4d64cd917624ff12c5bc0f1fb5488b1d5e273bc252d02305da18accc91439e32da466b8d5351b783b47df4949b9158b8fe7c5de52a335febc9cd3d8083b4eab0ccea1ce6dacd9f0a306648a1f986c07a2e", 0x8d}, {&(0x7f00000008c0)="735d580e403abc6858343497de16155e243c17d4a044aaf59ac11bc8bceeb654bbcc1ed1bb6c868666808dfe4c85048edb613ca8308be1d19bdc523f9f71c78d5aceb46c9720dbe10b1faf2077cd51b1818a3f87468aec980162e33ce05c6954822e673d93216a4146f7d05023df948a8594ef58aba63fb7fdb9d83b4a1989795ee87bade88d5f34847151e32c", 0x8d}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000980)="31455dfb4a44687edf8247e464c33470d07b9b69fad59d09c172a9f46262890abb28a8eb2cc81f2210018fb1803be6d7e81d69a3bfbc5a18cb4fb92d89130c6763989de218f54906935db4c61e75b6ab458a79176a960678b62bfed4c554f4dce3e1ba46a2760d1a3e19eed3fcd59341cb2d4da38d912673ce45a93e563d9d6f66c83d3ac95980b805100d69501eb14c2fa596a99a", 0x95}, {&(0x7f0000000a40)="f28a6ff6d3cb872d4cb6ad8878975f259eb7dc5f68f1d78de463903369012113b5f34973dbaf59b596771ae2b5ce92319fac134be54244af35181b0862eb367d86884128cd", 0x45}, {&(0x7f0000000ac0)="5dc08927ea430334a1a9d9bd45118deaabe7537036c40fc47facb333d0597efe685c136c752c202de085b8acbea7516b0826c910eb8e68bf21104b863d08dba059b23137efabc99b1e33934e3dd836d03a82232f91d96ff324cb82b73a768fc1bf101edd27f1d39f8a1e4b3d1381c389c3be", 0x72}, {&(0x7f0000000b40)="f1e4d20c129bb3325ccc3be1d5c0c61f1bc2dff49ac438f6288bd73725a6fb204b0e29702f29bbdffef8", 0x2a}, {&(0x7f0000000b80)="13ff8ce435576953ae4cdb1670a1f29edf95e012bf64142b38e3acd106161e3b97dce7d49ecf97815846f9901ddc980cc8e3fa959cac084534825a66c327a714afe5c41738f1f626c2f0c08e9a354af40b990e2bf41f312a73aa0be151d646abe3f212a1d2217cae10379ea4d0cf9457c7e889865c92593db3ea5eb73480b30a5a1778adf014f8330882416c27f51a3705c062fe2a337758a52906bfed04621848baad510f6774", 0xa7}, {&(0x7f0000000c40)="d93b3f90886951650330b1a8a05ddbbacc2b1b31f45d3733265f04be3a8eaf769c2fab66005bbb61f8adb42f5bd5046ac68116f5ce21b93db0936fc35453f7ff7666cc9cb77d3eba9cbc2583529d8f269b7f3246ffdf10d2c4406e1f2bffe1aaf6c6d6e0a1974ad3bce7fc01a62381375fe87ed43a9081f88a291853c1c9f15759627d4ba198530273ee4d54fa96551d9aee6d00bd52526a5a08b0dac5f7193057eda78e54f5b73d76eb8b0737a064182d5efe00fe872fd5f38fe4fa303f94c4c9bd2d817bdd557e47fee7", 0xcb}], 0x9, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x40, 0x40801}, {&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)="af9d15", 0x3}, {&(0x7f0000000f40)="c9591a", 0x3}, {&(0x7f0000000f80)="7cf1673156ae25eb9a00f3f51992f22337370270b21bd6ecc4d10162bf627de5bd34ce50a5ecca845e9a84f52e9377a8b2005c313168d1ae3ee444f313392fd516dd9963b5f58ef26661fde9957b8c1b2fae465871d2ae82b79a4b4852d8ffcf20675fc31c56fa4eac7a78641584f44074d1ac8d17d1333ccf1f69873a256a9ada3411d4010321e7cd28b51bf382be0cee2c475cbb3d36838df694ebeda9e58c", 0xa0}], 0x3, &(0x7f0000003580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r6]}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r8, r0, r9, r0]}}], 0x140, 0x40000}, {&(0x7f00000013c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003880)=[{&(0x7f0000001340)}, {&(0x7f0000001440)="e51a9d5fc5a9ae24f9f173a0a171504217", 0x11}, {&(0x7f00000036c0)="5cb6a2fd69884168092c25be1a94686d22880124b6f1adc16697f0c85b3a7df9fdf4bf239f30573013ce395b5a0154ec", 0x30}, {&(0x7f0000003700)="2b1a4fdeec5eebddd940865fd66635d72aff9c6ddc0c0b98841456ce5a14d9d9d2ce9ef3ca75865315892091443e6071c86f9908bc", 0x35}, {&(0x7f0000003740)="f65f14c7bb170b166819cecb49684d305428b673b4076f292341ff73cb058afc7452dfab566865b00798", 0x2a}, {&(0x7f0000003780)="4de1ffccc4fea43789abef", 0xb}, {&(0x7f00000037c0)="65c659a18f9f7d061dc821d52a29badb77ccee02415502175a36a76739a2d2837bec05dca8b3243e81d002796b1613cd946728ad5bc3e851907c9ee812af17d4ed9793208d5742ba6cc9b91bfede7f828a1f65571cd169689305ed0052c726a601d73b88415f79b4ea9c373d316f5b88ce13f0952857ab00de5296ab457d3c4bc6113252ec2d7e93fa917d690f24f4", 0x8f}], 0x7, &(0x7f0000003980)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x10}}], 0x28, 0x40}, {&(0x7f00000039c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003a40)="bc3c96232ffaa4fafe2da833ef8d447d34912be3a407fb37229ecfb11338a6ec98b9003c4f41e607e958c4876313bf642082fc379b6a906fb6969204bf7075b90987c89f6904b6288c91b383cfc463a21ef2f1638a8f4786d1fd80cb13771d1965ac437e5e7ba32c497e1ac26387c067669b34c9357ba552116c57915007383e67e3e9cb2c741970bd5cfe81dbb70299df470ee8938498743b79804fd1d4bac8b2213bb4dbc542767d13fc6951408f59e9a3df85c0b1cc9e65f6897fc501258d29d594b5b37967fcc8b34416bbb4c29621b22eb86486d1f1edfac77bb1e9acc0995f3d9d5e1e26ab235ed40d", 0xec}, {&(0x7f0000003b40)="246be4f98d874f18a82c07fe52848c5d32dfca667f72f306084c9d79300d6c1e8ddd8598d0a028f899b922ccd88b1fa012b690eb2d379034c56c", 0x3a}, {&(0x7f0000003b80)="90ff9691c972fa869b25a81bdf145860f43f1fcafda4965205f67f69498964", 0x1f}], 0x3, 0x0, 0x0, 0xe6d59a8a4305f5aa}], 0x5, 0x4000000) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:10 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:11 executing program 2 (fault-call:7 fault-nth:61): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 265.827830][T25711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.835910][T25711] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="370000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 265.870648][T25718] loop3: detected capacity change from 0 to 4 [ 265.889620][T25712] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.905528][T25718] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.909042][T25738] loop5: detected capacity change from 0 to 4 [ 265.928503][T25738] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.945397][T25742] loop0: detected capacity change from 0 to 4 [ 265.946674][T25741] FAULT_INJECTION: forcing a failure. [ 265.946674][T25741] name failslab, interval 1, probability 0, space 0, times 0 [ 265.964116][T25741] CPU: 1 PID: 25741 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 265.964240][T25742] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 265.972873][T25741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.972903][T25741] Call Trace: [ 265.972910][T25741] dump_stack+0x137/0x19d [ 265.972932][T25741] should_fail+0x23c/0x250 [ 266.004660][T25741] __should_failslab+0x81/0x90 [ 266.009636][T25741] ? io_req_defer+0x19c/0x470 [ 266.014333][T25741] should_failslab+0x5/0x20 [ 266.018819][T25741] kmem_cache_alloc_trace+0x49/0x320 [ 266.024196][T25741] ? io_req_defer_prep+0x218/0x440 [ 266.029293][T25741] io_req_defer+0x19c/0x470 [ 266.033867][T25741] io_queue_sqe+0x18/0x160 [ 266.038459][T25741] io_submit_sqe+0x15c7/0x30c0 [ 266.043212][T25741] ? kmem_cache_alloc_bulk+0x239/0x380 [ 266.048983][T25741] io_submit_sqes+0x61f/0xaf0 [ 266.053709][T25741] __se_sys_io_uring_enter+0x217/0xb20 [ 266.059154][T25741] ? fput+0x2d/0x130 [ 266.063128][T25741] __x64_sys_io_uring_enter+0x74/0x80 [ 266.068483][T25741] do_syscall_64+0x34/0x50 [ 266.072881][T25741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.078759][T25741] RIP: 0033:0x466459 [ 266.082643][T25741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 266.102318][T25741] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.110731][T25741] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 266.119148][T25741] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:11 executing program 2 (fault-call:7 fault-nth:62): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 266.127103][T25741] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 266.135154][T25741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.143114][T25741] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 266.163989][T25712] loop4: detected capacity change from 0 to 4 [ 266.169073][T25718] loop3: detected capacity change from 0 to 4 [ 266.177751][T25718] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.188351][T25712] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.200808][T25742] loop0: detected capacity change from 0 to 4 [ 266.204979][T25738] loop5: detected capacity change from 0 to 4 [ 266.213146][T25761] FAULT_INJECTION: forcing a failure. [ 266.213146][T25761] name failslab, interval 1, probability 0, space 0, times 0 [ 266.225916][T25761] CPU: 1 PID: 25761 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 266.228651][T25738] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.234673][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.234685][T25761] Call Trace: [ 266.234692][T25761] dump_stack+0x137/0x19d [ 266.234714][T25761] should_fail+0x23c/0x250 [ 266.263159][T25742] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.266026][T25761] __should_failslab+0x81/0x90 [ 266.281274][T25761] ? io_req_defer_prep+0xd9/0x440 [ 266.286285][T25761] should_failslab+0x5/0x20 [ 266.290867][T25761] __kmalloc+0x66/0x360 [ 266.295016][T25761] io_req_defer_prep+0xd9/0x440 [ 266.300890][T25761] io_req_defer+0x157/0x470 [ 266.305490][T25761] io_queue_sqe+0x18/0x160 [ 266.309931][T25761] io_submit_sqe+0x15c7/0x30c0 [ 266.314688][T25761] ? kmem_cache_alloc_bulk+0x239/0x380 [ 266.320137][T25761] io_submit_sqes+0x61f/0xaf0 [ 266.324812][T25761] __se_sys_io_uring_enter+0x217/0xb20 [ 266.330287][T25761] ? fput+0x2d/0x130 [ 266.334162][T25761] __x64_sys_io_uring_enter+0x74/0x80 [ 266.339617][T25761] do_syscall_64+0x34/0x50 [ 266.344166][T25761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.350079][T25761] RIP: 0033:0x466459 [ 266.353963][T25761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:11 executing program 2 (fault-call:7 fault-nth:63): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 266.374780][T25761] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.384249][T25761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 266.392316][T25761] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 266.400511][T25761] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 266.408506][T25761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.416531][T25761] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="380000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 266.484135][T25774] FAULT_INJECTION: forcing a failure. [ 266.484135][T25774] name failslab, interval 1, probability 0, space 0, times 0 [ 266.496777][T25774] CPU: 0 PID: 25774 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 266.505840][T25774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.509031][T25780] loop5: detected capacity change from 0 to 4 [ 266.517155][T25774] Call Trace: [ 266.517167][T25774] dump_stack+0x137/0x19d [ 266.517196][T25774] should_fail+0x23c/0x250 [ 266.535441][T25774] __should_failslab+0x81/0x90 [ 266.540225][T25774] ? io_req_defer+0x19c/0x470 [ 266.544896][T25774] should_failslab+0x5/0x20 [ 266.549622][T25774] kmem_cache_alloc_trace+0x49/0x320 [ 266.557322][T25774] ? io_req_defer_prep+0x218/0x440 [ 266.562611][T25774] io_req_defer+0x19c/0x470 [ 266.567458][T25774] io_queue_sqe+0x18/0x160 [ 266.571932][T25774] io_submit_sqe+0x15c7/0x30c0 [ 266.577030][T25774] ? kmem_cache_alloc_bulk+0x239/0x380 [ 266.582595][T25774] io_submit_sqes+0x61f/0xaf0 [ 266.587300][T25774] __se_sys_io_uring_enter+0x217/0xb20 [ 266.592915][T25774] ? fput+0x2d/0x130 [ 266.597386][T25774] __x64_sys_io_uring_enter+0x74/0x80 [ 266.604224][T25774] do_syscall_64+0x34/0x50 [ 266.608656][T25774] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.614538][T25774] RIP: 0033:0x466459 02:47:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="460000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 266.618414][T25774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 266.642043][T25774] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.650883][T25774] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 266.659975][T25774] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 266.668131][T25774] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 266.676092][T25774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:12 executing program 2 (fault-call:7 fault-nth:64): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 266.684051][T25774] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 266.693584][T25780] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.704825][T25779] loop4: detected capacity change from 0 to 4 [ 266.718638][T25779] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = perf_event_open$cgroup(&(0x7f0000000580)={0x2, 0x70, 0xff, 0x46, 0x91, 0x9, 0x0, 0x1, 0x180, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa8, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x42020, 0x3, 0x800, 0x1, 0x9, 0x1, 0xfff}, r1, 0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001580)={{r2}, "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"}) splice(r2, &(0x7f0000000140)=0xa5e, r0, &(0x7f0000000600)=0x2, 0x7, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00022dbd7000fcdbdf251400000008001c00", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xf807183369ac6e0f}, 0x20000050) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0x1, 0x40, 0x8, 0xfa, 0x0, 0xfffffffffffffffb, 0x100, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x42002, 0x7, 0x5, 0x1, 0x40000000000000, 0xbf, 0x401}, 0xffffffffffffffff, 0x8, r3, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000400)=""/109, 0x6d}], 0x8, 0x8c9, 0x5) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 266.735154][T25786] loop3: detected capacity change from 0 to 4 [ 266.743310][T25786] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.751888][T25792] FAULT_INJECTION: forcing a failure. [ 266.751888][T25792] name failslab, interval 1, probability 0, space 0, times 0 [ 266.765496][T25792] CPU: 1 PID: 25792 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 266.774372][T25792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.784499][T25792] Call Trace: [ 266.787855][T25792] dump_stack+0x137/0x19d [ 266.792170][T25792] should_fail+0x23c/0x250 [ 266.796567][T25792] __should_failslab+0x81/0x90 [ 266.801313][T25792] ? io_req_defer_prep+0xd9/0x440 [ 266.806407][T25792] should_failslab+0x5/0x20 [ 266.810894][T25792] __kmalloc+0x66/0x360 [ 266.815029][T25792] io_req_defer_prep+0xd9/0x440 [ 266.819864][T25792] io_req_defer+0x157/0x470 [ 266.824363][T25792] io_queue_sqe+0x18/0x160 [ 266.828774][T25792] io_submit_sqe+0x15c7/0x30c0 [ 266.833674][T25792] ? kmem_cache_alloc_bulk+0x239/0x380 [ 266.839164][T25792] io_submit_sqes+0x61f/0xaf0 [ 266.843835][T25792] __se_sys_io_uring_enter+0x217/0xb20 [ 266.849278][T25792] ? fput+0x2d/0x130 [ 266.853244][T25792] __x64_sys_io_uring_enter+0x74/0x80 [ 266.858725][T25792] do_syscall_64+0x34/0x50 [ 266.863152][T25792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.869108][T25792] RIP: 0033:0x466459 [ 266.872997][T25792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 266.894772][T25792] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.903187][T25792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 266.911232][T25792] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 266.919280][T25792] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 266.927291][T25792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:12 executing program 2 (fault-call:7 fault-nth:65): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 266.935243][T25792] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 266.969344][T25780] loop5: detected capacity change from 0 to 4 [ 266.979816][T25779] loop4: detected capacity change from 0 to 4 [ 266.980218][T25786] loop3: detected capacity change from 0 to 4 [ 266.993728][T25780] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 266.996228][T25779] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.008688][T25814] FAULT_INJECTION: forcing a failure. [ 267.008688][T25814] name failslab, interval 1, probability 0, space 0, times 0 [ 267.025125][T25814] CPU: 1 PID: 25814 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 267.033876][T25814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.043934][T25814] Call Trace: [ 267.047211][T25814] dump_stack+0x137/0x19d [ 267.052060][T25814] should_fail+0x23c/0x250 [ 267.056481][T25814] __should_failslab+0x81/0x90 [ 267.061232][T25814] ? io_req_defer+0x19c/0x470 [ 267.066085][T25814] should_failslab+0x5/0x20 [ 267.071029][T25814] kmem_cache_alloc_trace+0x49/0x320 [ 267.076313][T25814] ? io_req_defer_prep+0x218/0x440 [ 267.081420][T25814] io_req_defer+0x19c/0x470 [ 267.085968][T25814] io_queue_sqe+0x18/0x160 [ 267.090387][T25814] io_submit_sqe+0x15c7/0x30c0 [ 267.096326][T25814] ? kmem_cache_alloc_bulk+0x239/0x380 [ 267.101765][T25814] io_submit_sqes+0x61f/0xaf0 [ 267.106427][T25814] __se_sys_io_uring_enter+0x217/0xb20 [ 267.111869][T25814] ? fput+0x2d/0x130 [ 267.115745][T25814] __x64_sys_io_uring_enter+0x74/0x80 [ 267.121111][T25814] do_syscall_64+0x34/0x50 [ 267.125513][T25814] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 267.131550][T25814] RIP: 0033:0x466459 [ 267.135424][T25814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 267.155705][T25814] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 267.164112][T25814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 267.172537][T25814] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 267.180562][T25814] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 267.188522][T25814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.196490][T25814] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 267.205662][T25819] loop0: detected capacity change from 0 to 4 [ 267.215848][T25786] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="390000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="470000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 267.244080][T25819] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.266445][T25829] loop5: detected capacity change from 0 to 4 [ 267.285461][T25831] loop4: detected capacity change from 0 to 4 02:47:12 executing program 2 (fault-call:7 fault-nth:66): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 267.302459][T25829] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.312569][T25819] loop0: detected capacity change from 0 to 4 [ 267.318145][T25831] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.329039][T25819] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.345114][T25837] loop3: detected capacity change from 0 to 4 [ 267.357608][T25846] FAULT_INJECTION: forcing a failure. [ 267.357608][T25846] name failslab, interval 1, probability 0, space 0, times 0 [ 267.370449][T25846] CPU: 1 PID: 25846 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 267.379211][T25846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.389343][T25846] Call Trace: [ 267.392694][T25846] dump_stack+0x137/0x19d [ 267.397137][T25846] should_fail+0x23c/0x250 [ 267.401559][T25846] __should_failslab+0x81/0x90 [ 267.406337][T25846] should_failslab+0x5/0x20 [ 267.410834][T25846] kmem_cache_alloc_bulk+0x40/0x380 [ 267.416564][T25846] io_submit_sqes+0x515/0xaf0 [ 267.421935][T25846] __se_sys_io_uring_enter+0x217/0xb20 [ 267.427474][T25846] ? fput+0x2d/0x130 [ 267.431663][T25846] __x64_sys_io_uring_enter+0x74/0x80 [ 267.437622][T25846] do_syscall_64+0x34/0x50 [ 267.443208][T25846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 267.449234][T25846] RIP: 0033:0x466459 [ 267.453179][T25846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 267.474149][T25846] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 267.482574][T25846] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 267.490528][T25846] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 267.498590][T25846] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 267.506987][T25846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.515459][T25846] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 267.537280][T25837] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.548711][T25829] loop5: detected capacity change from 0 to 4 02:47:12 executing program 2 (fault-call:7 fault-nth:67): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3a0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 267.557977][T25829] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="c7829c7740e9cfc8f7e2f04af49db92d", 0x10) r1 = fork() tkill(r1, 0x31) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/tcp6\x00') r3 = fork() tkill(r3, 0x31) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='mounts\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000040)=""/227, 0xe3}], 0x1, 0x5, 0x0) r5 = eventfd2(0x80, 0x80000) read$eventfd(r5, &(0x7f0000000180), 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="3639000000000000c910ff010000000000000000000000000001071000000001028015030900000000000000ffb80fda3bef996e1b48769ea5a82f48b8eb3fb0e64a5e3310a8bb0596b482af181b03525360c2459b773d190a4cf3a1d2ad22b9f28290ea5232597ae72aef680fb3d9dcc76352a3224f31ac0ce98671de936a68ba4949a54252ef72e7a09d812b6ad7b4346136393b6397c98c14dae61fe765db4ab914752813947a1598ad926b4eb03c9b37efbf336800b119c28054d94ce8f2b9beb8e11022e90113cd0f19dfdc47ae1d63fdc377f98dc3f54c9805020723085ec21dce17ccfefada9f0e3a99d412b841a83202979032eeb633f183a754c0b3b5fe68503540ce0534c6e79cafe1e9c104730776d608ad05a14dd0607cca05db7c88b8fbfb7b2bf05bd877834f5b738283181b58b117dcc0018af4becdeeecc204000001010106000000000000072800000003084d00007f00000000000000ff0000000000000000000000000000000900000000000000c2040000000207480000000110000b0308000000000000000900000000000000030000000000000004000000000000000008000000000000000200000000000000000000000000000100"/472], 0x1d8) r6 = fork() tkill(r6, 0x16) r7 = open(&(0x7f0000000000)='./file0\x00', 0x16000, 0x2) kcmp$KCMP_EPOLL_TFD(r6, r1, 0x7, r4, &(0x7f0000000440)={r7, r4, 0x3ff}) [ 267.599114][T25837] loop3: detected capacity change from 0 to 4 [ 267.611049][T25863] loop4: detected capacity change from 0 to 4 [ 267.617361][T25866] FAULT_INJECTION: forcing a failure. [ 267.617361][T25866] name failslab, interval 1, probability 0, space 0, times 0 [ 267.631859][T25866] CPU: 0 PID: 25866 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 267.640646][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.641185][T25857] loop0: detected capacity change from 0 to 4 [ 267.650710][T25866] Call Trace: [ 267.650722][T25866] dump_stack+0x137/0x19d [ 267.650744][T25866] should_fail+0x23c/0x250 [ 267.673124][T25866] __should_failslab+0x81/0x90 [ 267.676083][T25870] loop5: detected capacity change from 0 to 4 [ 267.678034][T25866] ? io_req_defer_prep+0xd9/0x440 [ 267.690194][T25866] should_failslab+0x5/0x20 [ 267.695007][T25866] __kmalloc+0x66/0x360 [ 267.699465][T25866] io_req_defer_prep+0xd9/0x440 [ 267.704451][T25866] io_req_defer+0x157/0x470 [ 267.709293][T25866] io_queue_sqe+0x18/0x160 [ 267.714123][T25866] io_submit_sqe+0x15c7/0x30c0 [ 267.719312][T25866] ? kmem_cache_alloc_bulk+0x239/0x380 [ 267.724967][T25866] io_submit_sqes+0x61f/0xaf0 [ 267.729806][T25866] __se_sys_io_uring_enter+0x217/0xb20 [ 267.735254][T25866] ? fput+0x2d/0x130 [ 267.739137][T25866] __x64_sys_io_uring_enter+0x74/0x80 [ 267.744492][T25866] do_syscall_64+0x34/0x50 [ 267.749011][T25866] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 267.754940][T25866] RIP: 0033:0x466459 [ 267.758813][T25866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 267.778591][T25866] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 267.787190][T25866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:13 executing program 2 (fault-call:7 fault-nth:68): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 267.795232][T25866] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 267.803189][T25866] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 267.811144][T25866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.819580][T25866] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 267.829657][T25863] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.845779][T25837] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.855505][T25857] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.867728][T25870] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 267.880057][T25888] FAULT_INJECTION: forcing a failure. [ 267.880057][T25888] name failslab, interval 1, probability 0, space 0, times 0 [ 267.894112][T25888] CPU: 0 PID: 25888 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 267.902983][T25888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.913368][T25888] Call Trace: [ 267.916724][T25888] dump_stack+0x137/0x19d [ 267.921038][T25888] should_fail+0x23c/0x250 [ 267.925499][T25888] __should_failslab+0x81/0x90 [ 267.930364][T25888] ? io_req_defer+0x19c/0x470 [ 267.935137][T25888] should_failslab+0x5/0x20 [ 267.939825][T25888] kmem_cache_alloc_trace+0x49/0x320 [ 267.945393][T25888] ? io_req_defer_prep+0x218/0x440 [ 267.950792][T25888] io_req_defer+0x19c/0x470 [ 267.955299][T25888] io_queue_sqe+0x18/0x160 [ 267.959780][T25888] io_submit_sqe+0x15c7/0x30c0 [ 267.964623][T25888] ? kmem_cache_alloc_bulk+0x239/0x380 [ 267.970166][T25888] io_submit_sqes+0x61f/0xaf0 [ 267.974861][T25888] __se_sys_io_uring_enter+0x217/0xb20 [ 267.980316][T25888] ? fput+0x2d/0x130 [ 267.984201][T25888] __x64_sys_io_uring_enter+0x74/0x80 [ 267.990518][T25888] do_syscall_64+0x34/0x50 [ 267.994950][T25888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.000992][T25888] RIP: 0033:0x466459 [ 268.005019][T25888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.024825][T25888] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 268.033442][T25888] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 268.041538][T25888] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="480000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:13 executing program 2 (fault-call:7 fault-nth:69): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 268.049509][T25888] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 268.057964][T25888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.065928][T25888] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 268.097002][T25863] loop4: detected capacity change from 0 to 4 [ 268.155677][T25863] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.164058][T25908] FAULT_INJECTION: forcing a failure. [ 268.164058][T25908] name failslab, interval 1, probability 0, space 0, times 0 [ 268.170089][T25857] loop0: detected capacity change from 0 to 4 [ 268.178841][T25908] CPU: 1 PID: 25908 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 268.185793][T25870] loop5: detected capacity change from 0 to 4 [ 268.193732][T25908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.193746][T25908] Call Trace: [ 268.193753][T25908] dump_stack+0x137/0x19d [ 268.193775][T25908] should_fail+0x23c/0x250 [ 268.193790][T25908] __should_failslab+0x81/0x90 [ 268.232325][T25908] ? io_req_defer_prep+0xd9/0x440 [ 268.237836][T25908] should_failslab+0x5/0x20 [ 268.242460][T25908] __kmalloc+0x66/0x360 [ 268.248615][T25908] io_req_defer_prep+0xd9/0x440 [ 268.253669][T25908] io_req_defer+0x157/0x470 [ 268.258206][T25908] io_queue_sqe+0x18/0x160 [ 268.263028][T25908] io_submit_sqe+0x15c7/0x30c0 [ 268.268748][T25908] ? kmem_cache_alloc_bulk+0x239/0x380 [ 268.274191][T25908] io_submit_sqes+0x61f/0xaf0 [ 268.278969][T25908] __se_sys_io_uring_enter+0x217/0xb20 [ 268.284411][T25908] ? fput+0x2d/0x130 [ 268.288302][T25908] __x64_sys_io_uring_enter+0x74/0x80 [ 268.293762][T25908] do_syscall_64+0x34/0x50 [ 268.298378][T25908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.305750][T25908] RIP: 0033:0x466459 [ 268.310081][T25908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.330373][T25908] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 268.338784][T25908] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 268.347108][T25908] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:13 executing program 2 (fault-call:7 fault-nth:70): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 268.355068][T25908] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 268.363118][T25908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.371069][T25908] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 268.379520][T25870] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.393593][T25912] loop3: detected capacity change from 0 to 4 02:47:13 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 268.412153][T25912] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.425766][T25918] FAULT_INJECTION: forcing a failure. [ 268.425766][T25918] name failslab, interval 1, probability 0, space 0, times 0 [ 268.438614][T25918] CPU: 0 PID: 25918 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 268.447410][T25918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.457581][T25918] Call Trace: [ 268.460864][T25918] dump_stack+0x137/0x19d [ 268.465220][T25918] should_fail+0x23c/0x250 [ 268.469723][T25918] __should_failslab+0x81/0x90 [ 268.474470][T25918] ? io_req_defer+0x19c/0x470 [ 268.479206][T25918] should_failslab+0x5/0x20 [ 268.483866][T25918] kmem_cache_alloc_trace+0x49/0x320 [ 268.489191][T25918] ? io_req_defer_prep+0x218/0x440 [ 268.494286][T25918] io_req_defer+0x19c/0x470 [ 268.498771][T25918] io_queue_sqe+0x18/0x160 [ 268.503225][T25918] io_submit_sqe+0x15c7/0x30c0 [ 268.508044][T25918] ? kmem_cache_alloc_bulk+0x239/0x380 [ 268.513485][T25918] io_submit_sqes+0x61f/0xaf0 [ 268.518252][T25918] __se_sys_io_uring_enter+0x217/0xb20 [ 268.523824][T25918] ? fput+0x2d/0x130 [ 268.527776][T25918] __x64_sys_io_uring_enter+0x74/0x80 [ 268.533129][T25918] do_syscall_64+0x34/0x50 [ 268.537535][T25918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.543414][T25918] RIP: 0033:0x466459 [ 268.547311][T25918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.567250][T25918] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 268.575643][T25918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 268.583609][T25918] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 268.591561][T25918] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 268.599512][T25918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:13 executing program 2 (fault-call:7 fault-nth:71): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 268.607464][T25918] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 268.668486][T25912] loop3: detected capacity change from 0 to 4 [ 268.670458][T25928] FAULT_INJECTION: forcing a failure. [ 268.670458][T25928] name failslab, interval 1, probability 0, space 0, times 0 [ 268.688520][T25928] CPU: 1 PID: 25928 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 268.688554][T25912] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.694457][T25932] loop0: detected capacity change from 0 to 4 02:47:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) socketpair(0x3a1fd9e4b536659e, 0x5, 0x8503, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet6(r2, &(0x7f0000000040)=""/217, 0xd9, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0xc5, @empty, 0x101}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0xfffffc00, {{0xa, 0x4e24, 0x0, @local, 0x7fff}}, 0x0, 0x6, [{{0xa, 0x4e22, 0x3f, @private1={0xfc, 0x1, [], 0x1}, 0x7}}, {{0xa, 0x4e24, 0x7, @remote, 0x9}}, {{0xa, 0x4e23, 0x5, @ipv4={[], [], @multicast2}, 0x10000}}, {{0xa, 0x4e24, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x7fffffff}}, {{0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, [], 0x1}, 0x4}}]}, 0x390) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r3, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 268.697481][T25928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.716398][T25932] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.723128][T25928] Call Trace: [ 268.723139][T25928] dump_stack+0x137/0x19d [ 268.723161][T25928] should_fail+0x23c/0x250 [ 268.744489][T25928] __should_failslab+0x81/0x90 [ 268.750306][T25928] ? io_req_defer_prep+0xd9/0x440 [ 268.755444][T25928] should_failslab+0x5/0x20 [ 268.760131][T25928] __kmalloc+0x66/0x360 [ 268.764332][T25928] io_req_defer_prep+0xd9/0x440 [ 268.769237][T25928] io_req_defer+0x157/0x470 [ 268.773810][T25928] io_queue_sqe+0x18/0x160 [ 268.778227][T25928] io_submit_sqe+0x15c7/0x30c0 [ 268.783005][T25928] ? kmem_cache_alloc_bulk+0x239/0x380 [ 268.788622][T25928] io_submit_sqes+0x61f/0xaf0 [ 268.793369][T25928] __se_sys_io_uring_enter+0x217/0xb20 [ 268.798807][T25928] ? fput+0x2d/0x130 [ 268.802695][T25928] __x64_sys_io_uring_enter+0x74/0x80 [ 268.808058][T25928] do_syscall_64+0x34/0x50 [ 268.812473][T25928] entry_SYSCALL_64_after_hwframe+0x44/0xae 02:47:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 268.818363][T25928] RIP: 0033:0x466459 [ 268.822235][T25928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.842092][T25928] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 268.850497][T25928] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 268.858522][T25928] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:14 executing program 2 (fault-call:7 fault-nth:72): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 268.866742][T25928] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 268.874923][T25928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.882898][T25928] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="490000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 268.961460][T25932] loop0: detected capacity change from 0 to 4 [ 268.971732][T25932] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 268.979240][T25954] FAULT_INJECTION: forcing a failure. [ 268.979240][T25954] name failslab, interval 1, probability 0, space 0, times 0 [ 268.985087][T25953] loop4: detected capacity change from 0 to 4 [ 268.994534][T25954] CPU: 0 PID: 25954 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 269.002725][T25951] loop5: detected capacity change from 0 to 4 [ 269.009341][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.009357][T25954] Call Trace: [ 269.009364][T25954] dump_stack+0x137/0x19d [ 269.033032][T25954] should_fail+0x23c/0x250 [ 269.037441][T25954] __should_failslab+0x81/0x90 [ 269.042209][T25954] ? io_req_defer+0x19c/0x470 [ 269.047033][T25954] should_failslab+0x5/0x20 [ 269.051524][T25954] kmem_cache_alloc_trace+0x49/0x320 [ 269.056797][T25954] ? io_req_defer_prep+0x218/0x440 [ 269.061906][T25954] io_req_defer+0x19c/0x470 [ 269.066554][T25954] io_queue_sqe+0x18/0x160 [ 269.071012][T25954] io_submit_sqe+0x15c7/0x30c0 [ 269.075954][T25954] ? kmem_cache_alloc_bulk+0x239/0x380 [ 269.081494][T25954] io_submit_sqes+0x61f/0xaf0 [ 269.086308][T25954] __se_sys_io_uring_enter+0x217/0xb20 [ 269.091892][T25954] ? fput+0x2d/0x130 [ 269.095916][T25954] __x64_sys_io_uring_enter+0x74/0x80 [ 269.101282][T25954] do_syscall_64+0x34/0x50 [ 269.105887][T25954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.111825][T25954] RIP: 0033:0x466459 [ 269.115975][T25954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.136260][T25954] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 269.145277][T25954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 269.153512][T25954] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:14 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 269.161698][T25954] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 269.172678][T25954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.181156][T25954] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 269.200514][T25953] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:14 executing program 2 (fault-call:7 fault-nth:73): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 269.222672][T25951] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.255634][T25966] loop3: detected capacity change from 0 to 4 [ 269.275254][T25972] FAULT_INJECTION: forcing a failure. [ 269.275254][T25972] name failslab, interval 1, probability 0, space 0, times 0 [ 269.287992][T25972] CPU: 0 PID: 25972 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 269.296769][T25972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.306934][T25972] Call Trace: [ 269.310254][T25972] dump_stack+0x137/0x19d [ 269.314567][T25972] should_fail+0x23c/0x250 [ 269.318963][T25972] __should_failslab+0x81/0x90 [ 269.323719][T25972] ? io_req_defer_prep+0xd9/0x440 [ 269.328817][T25972] should_failslab+0x5/0x20 [ 269.333299][T25972] __kmalloc+0x66/0x360 [ 269.337431][T25972] io_req_defer_prep+0xd9/0x440 [ 269.342326][T25972] io_req_defer+0x157/0x470 [ 269.346807][T25972] io_queue_sqe+0x18/0x160 [ 269.351273][T25972] io_submit_sqe+0x15c7/0x30c0 [ 269.356089][T25972] ? kmem_cache_alloc_bulk+0x239/0x380 [ 269.361655][T25972] io_submit_sqes+0x61f/0xaf0 [ 269.366342][T25972] __se_sys_io_uring_enter+0x217/0xb20 [ 269.371812][T25972] ? fput+0x2d/0x130 02:47:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 269.375784][T25972] __x64_sys_io_uring_enter+0x74/0x80 [ 269.381154][T25972] do_syscall_64+0x34/0x50 [ 269.385604][T25972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.391533][T25972] RIP: 0033:0x466459 [ 269.395409][T25972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.415015][T25972] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 269.423761][T25972] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 269.432543][T25972] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 269.441597][T25972] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 269.449556][T25972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.458320][T25972] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:14 executing program 2 (fault-call:7 fault-nth:74): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 269.473438][T25966] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.485624][T25951] loop5: detected capacity change from 0 to 4 [ 269.492934][T25951] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.538947][T25966] loop3: detected capacity change from 0 to 4 [ 269.541859][T25982] loop4: detected capacity change from 0 to 4 [ 269.551490][T25981] loop0: detected capacity change from 0 to 4 [ 269.551739][T25989] FAULT_INJECTION: forcing a failure. [ 269.551739][T25989] name failslab, interval 1, probability 0, space 0, times 0 [ 269.570786][T25989] CPU: 1 PID: 25989 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 269.580245][T25989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.590294][T25989] Call Trace: [ 269.593575][T25989] dump_stack+0x137/0x19d [ 269.597894][T25989] should_fail+0x23c/0x250 [ 269.602395][T25989] __should_failslab+0x81/0x90 [ 269.607334][T25989] ? io_req_defer+0x19c/0x470 [ 269.612107][T25989] should_failslab+0x5/0x20 [ 269.616632][T25989] kmem_cache_alloc_trace+0x49/0x320 [ 269.621909][T25989] ? io_req_defer_prep+0x218/0x440 [ 269.627059][T25989] io_req_defer+0x19c/0x470 [ 269.631544][T25989] io_queue_sqe+0x18/0x160 [ 269.635954][T25989] io_submit_sqe+0x15c7/0x30c0 [ 269.640700][T25989] ? kmem_cache_alloc_bulk+0x239/0x380 [ 269.646205][T25989] io_submit_sqes+0x61f/0xaf0 [ 269.650954][T25989] __se_sys_io_uring_enter+0x217/0xb20 [ 269.656477][T25989] ? fput+0x2d/0x130 [ 269.660494][T25989] __x64_sys_io_uring_enter+0x74/0x80 [ 269.665847][T25989] do_syscall_64+0x34/0x50 [ 269.670248][T25989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.676170][T25989] RIP: 0033:0x466459 [ 269.680045][T25989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.699892][T25989] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 269.708573][T25989] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 269.716591][T25989] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 269.724547][T25989] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 269.732498][T25989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.740452][T25989] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 269.750527][T25966] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.769888][T25981] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3d0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:15 executing program 2 (fault-call:7 fault-nth:75): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = fork() tkill(r1, 0x31) r2 = fork() r3 = syz_open_procfs(r2, &(0x7f0000000000)='oom_adj\x00') preadv(r3, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) [ 269.781200][T25982] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.844404][T25982] loop4: detected capacity change from 0 to 4 [ 269.858806][T26007] FAULT_INJECTION: forcing a failure. [ 269.858806][T26007] name failslab, interval 1, probability 0, space 0, times 0 [ 269.861630][T25981] loop0: detected capacity change from 0 to 4 [ 269.871495][T26007] CPU: 0 PID: 26007 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 269.886286][T26007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.896541][T26007] Call Trace: [ 269.899876][T26007] dump_stack+0x137/0x19d [ 269.904209][T26007] should_fail+0x23c/0x250 [ 269.908628][T26007] __should_failslab+0x81/0x90 [ 269.909388][T25981] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.913391][T26007] ? io_req_defer_prep+0xd9/0x440 [ 269.927701][T26007] should_failslab+0x5/0x20 [ 269.932212][T26007] __kmalloc+0x66/0x360 [ 269.935052][T25982] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.936489][T26007] io_req_defer_prep+0xd9/0x440 [ 269.936518][T26007] io_req_defer+0x157/0x470 [ 269.955111][T26007] io_queue_sqe+0x18/0x160 [ 269.959535][T26007] io_submit_sqe+0x15c7/0x30c0 [ 269.964338][T26007] ? kmem_cache_alloc_bulk+0x239/0x380 [ 269.966804][T26014] loop5: detected capacity change from 0 to 4 [ 269.969860][T26007] io_submit_sqes+0x61f/0xaf0 [ 269.980050][T26014] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 269.980578][T26007] __se_sys_io_uring_enter+0x217/0xb20 [ 269.980606][T26007] ? fput+0x2d/0x130 [ 269.992225][T26015] loop3: detected capacity change from 0 to 4 [ 269.995333][T26007] __x64_sys_io_uring_enter+0x74/0x80 [ 270.004494][T26015] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.005293][T26007] do_syscall_64+0x34/0x50 [ 270.025006][T26007] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 270.031056][T26007] RIP: 0033:0x466459 [ 270.035049][T26007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 270.054779][T26007] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 270.063274][T26007] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 270.071384][T26007] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 270.079360][T26007] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 270.087427][T26007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:15 executing program 2 (fault-call:7 fault-nth:76): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 270.095381][T26007] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:15 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 270.150116][T26014] loop5: detected capacity change from 0 to 4 [ 270.158826][T26015] loop3: detected capacity change from 0 to 4 [ 270.165928][T26014] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.175889][T26015] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.188470][T26041] loop0: detected capacity change from 0 to 4 [ 270.194786][T26037] FAULT_INJECTION: forcing a failure. [ 270.194786][T26037] name failslab, interval 1, probability 0, space 0, times 0 [ 270.207417][T26037] CPU: 0 PID: 26037 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 270.216175][T26037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.226213][T26037] Call Trace: [ 270.229563][T26037] dump_stack+0x137/0x19d [ 270.233883][T26037] should_fail+0x23c/0x250 [ 270.238277][T26037] __should_failslab+0x81/0x90 [ 270.243109][T26037] ? io_req_defer+0x19c/0x470 [ 270.247863][T26037] should_failslab+0x5/0x20 [ 270.252345][T26037] kmem_cache_alloc_trace+0x49/0x320 [ 270.257607][T26037] ? io_req_defer_prep+0x218/0x440 [ 270.262823][T26037] io_req_defer+0x19c/0x470 [ 270.267480][T26037] io_queue_sqe+0x18/0x160 [ 270.271948][T26037] io_submit_sqe+0x15c7/0x30c0 [ 270.276723][T26037] ? kmem_cache_alloc_bulk+0x239/0x380 [ 270.282174][T26037] io_submit_sqes+0x61f/0xaf0 [ 270.286913][T26037] __se_sys_io_uring_enter+0x217/0xb20 [ 270.292355][T26037] ? fput+0x2d/0x130 [ 270.296239][T26037] __x64_sys_io_uring_enter+0x74/0x80 [ 270.301594][T26037] do_syscall_64+0x34/0x50 [ 270.306058][T26037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 270.312175][T26037] RIP: 0033:0x466459 [ 270.316047][T26037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 270.335792][T26037] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 270.344205][T26037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 270.352156][T26037] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 270.360105][T26037] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 270.368082][T26037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.376035][T26037] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="3e0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:15 executing program 2 (fault-call:7 fault-nth:77): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 270.400989][T26041] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.402872][T26049] loop4: detected capacity change from 0 to 4 [ 270.429365][T26049] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.499651][T26059] loop5: detected capacity change from 0 to 4 [ 270.508766][T26059] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.512842][T26041] loop0: detected capacity change from 0 to 4 [ 270.521035][T26049] loop4: detected capacity change from 0 to 4 [ 270.535811][T26049] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.546654][T26041] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.552469][T26071] FAULT_INJECTION: forcing a failure. [ 270.552469][T26071] name failslab, interval 1, probability 0, space 0, times 0 [ 270.569168][T26071] CPU: 0 PID: 26071 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 270.575078][T26065] loop3: detected capacity change from 0 to 4 [ 270.579346][T26071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.579359][T26071] Call Trace: [ 270.579366][T26071] dump_stack+0x137/0x19d [ 270.603169][T26071] should_fail+0x23c/0x250 [ 270.607579][T26071] __should_failslab+0x81/0x90 [ 270.612460][T26071] ? io_req_defer_prep+0xd9/0x440 [ 270.617535][T26071] should_failslab+0x5/0x20 [ 270.622032][T26071] __kmalloc+0x66/0x360 [ 270.626227][T26071] io_req_defer_prep+0xd9/0x440 [ 270.631107][T26071] io_req_defer+0x157/0x470 [ 270.635644][T26071] io_queue_sqe+0x18/0x160 [ 270.640058][T26071] io_submit_sqe+0x15c7/0x30c0 [ 270.644804][T26071] ? kmem_cache_alloc_bulk+0x239/0x380 [ 270.650314][T26071] io_submit_sqes+0x61f/0xaf0 [ 270.655009][T26071] __se_sys_io_uring_enter+0x217/0xb20 [ 270.660553][T26071] ? fput+0x2d/0x130 [ 270.664446][T26071] __x64_sys_io_uring_enter+0x74/0x80 [ 270.669815][T26071] do_syscall_64+0x34/0x50 [ 270.674234][T26071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 270.680115][T26071] RIP: 0033:0x466459 [ 270.684005][T26071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 270.703701][T26071] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 270.712891][T26071] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 270.720872][T26071] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 270.728874][T26071] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 270.736870][T26071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.744855][T26071] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:16 executing program 2 (fault-call:7 fault-nth:78): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 270.786676][T26065] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.802485][T26059] loop5: detected capacity change from 0 to 4 [ 270.823687][T26059] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 270.841526][T26065] loop3: detected capacity change from 0 to 4 [ 270.843717][T26097] FAULT_INJECTION: forcing a failure. [ 270.843717][T26097] name failslab, interval 1, probability 0, space 0, times 0 [ 270.860227][T26097] CPU: 1 PID: 26097 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 270.869084][T26097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.879411][T26097] Call Trace: [ 270.882681][T26097] dump_stack+0x137/0x19d [ 270.887063][T26097] should_fail+0x23c/0x250 [ 270.891614][T26097] __should_failslab+0x81/0x90 [ 270.896370][T26097] ? io_req_defer+0x19c/0x470 [ 270.901070][T26097] should_failslab+0x5/0x20 [ 270.905563][T26097] kmem_cache_alloc_trace+0x49/0x320 [ 270.910847][T26097] ? io_req_defer_prep+0x218/0x440 [ 270.915950][T26097] io_req_defer+0x19c/0x470 [ 270.920439][T26097] io_queue_sqe+0x18/0x160 [ 270.924865][T26097] io_submit_sqe+0x15c7/0x30c0 [ 270.929666][T26097] ? kmem_cache_alloc_bulk+0x239/0x380 [ 270.935130][T26097] io_submit_sqes+0x61f/0xaf0 [ 270.939810][T26097] __se_sys_io_uring_enter+0x217/0xb20 [ 270.945299][T26097] ? fput+0x2d/0x130 [ 270.949225][T26097] __x64_sys_io_uring_enter+0x74/0x80 [ 270.954582][T26097] do_syscall_64+0x34/0x50 [ 270.958986][T26097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 270.964920][T26097] RIP: 0033:0x466459 [ 270.968804][T26097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 270.988390][T26097] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 270.996918][T26097] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 271.004958][T26097] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 271.012910][T26097] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.021215][T26097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.029168][T26097] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x80000000, 0x7}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x81}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfffd}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3da}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6c5}]}, 0x90}, 0x1, 0x0, 0x0, 0xc4}, 0x24008842) 02:47:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="410000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:16 executing program 2 (fault-call:7 fault-nth:79): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 271.044601][T26094] loop4: detected capacity change from 0 to 4 [ 271.054746][T26099] loop0: detected capacity change from 0 to 4 [ 271.058921][T26065] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="004000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 271.095825][T26099] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.110111][T26094] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.121498][T26112] loop5: detected capacity change from 0 to 4 [ 271.124787][T26114] FAULT_INJECTION: forcing a failure. [ 271.124787][T26114] name failslab, interval 1, probability 0, space 0, times 0 [ 271.140242][T26114] CPU: 1 PID: 26114 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 271.140932][T26112] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.149000][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.149014][T26114] Call Trace: [ 271.149021][T26114] dump_stack+0x137/0x19d [ 271.176287][T26114] should_fail+0x23c/0x250 [ 271.180902][T26114] __should_failslab+0x81/0x90 [ 271.185776][T26114] ? io_req_defer_prep+0xd9/0x440 [ 271.190801][T26114] should_failslab+0x5/0x20 [ 271.195345][T26114] __kmalloc+0x66/0x360 [ 271.199497][T26114] io_req_defer_prep+0xd9/0x440 [ 271.204350][T26114] io_req_defer+0x157/0x470 [ 271.208932][T26114] io_queue_sqe+0x18/0x160 [ 271.213381][T26114] io_submit_sqe+0x15c7/0x30c0 [ 271.218169][T26114] ? kmem_cache_alloc_bulk+0x239/0x380 [ 271.223618][T26114] io_submit_sqes+0x61f/0xaf0 [ 271.228444][T26114] __se_sys_io_uring_enter+0x217/0xb20 [ 271.234018][T26114] ? fput+0x2d/0x130 [ 271.237916][T26114] __x64_sys_io_uring_enter+0x74/0x80 [ 271.243347][T26114] do_syscall_64+0x34/0x50 [ 271.247804][T26114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 271.253683][T26114] RIP: 0033:0x466459 [ 271.257608][T26114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 271.277200][T26114] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 271.285598][T26114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:16 executing program 2 (fault-call:7 fault-nth:80): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 271.293564][T26114] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 271.301519][T26114] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.309484][T26114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.317524][T26114] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 271.328505][T26094] loop4: detected capacity change from 0 to 4 [ 271.338038][T26099] loop0: detected capacity change from 0 to 4 [ 271.360841][T26094] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.370684][T26112] loop5: detected capacity change from 0 to 4 [ 271.377085][T26132] loop3: detected capacity change from 0 to 4 [ 271.390970][T26099] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.400545][T26112] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 271.411788][T26137] FAULT_INJECTION: forcing a failure. [ 271.411788][T26137] name failslab, interval 1, probability 0, space 0, times 0 [ 271.424523][T26137] CPU: 0 PID: 26137 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 271.432098][T26132] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.433274][T26137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.452817][T26137] Call Trace: [ 271.456115][T26137] dump_stack+0x137/0x19d [ 271.460613][T26137] should_fail+0x23c/0x250 [ 271.465110][T26137] __should_failslab+0x81/0x90 [ 271.470030][T26137] ? io_req_defer+0x19c/0x470 [ 271.474742][T26137] should_failslab+0x5/0x20 [ 271.479259][T26137] kmem_cache_alloc_trace+0x49/0x320 [ 271.484597][T26137] ? io_req_defer_prep+0x218/0x440 [ 271.489695][T26137] io_req_defer+0x19c/0x470 [ 271.494191][T26137] io_queue_sqe+0x18/0x160 [ 271.498693][T26137] io_submit_sqe+0x15c7/0x30c0 [ 271.506396][T26137] ? kmem_cache_alloc_bulk+0x239/0x380 [ 271.511896][T26137] io_submit_sqes+0x61f/0xaf0 [ 271.516558][T26137] __se_sys_io_uring_enter+0x217/0xb20 [ 271.522016][T26137] ? fput+0x2d/0x130 [ 271.525897][T26137] __x64_sys_io_uring_enter+0x74/0x80 [ 271.531257][T26137] do_syscall_64+0x34/0x50 [ 271.535669][T26137] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 271.541543][T26137] RIP: 0033:0x466459 [ 271.545443][T26137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 271.565395][T26137] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 271.574103][T26137] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 271.582601][T26137] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 271.590578][T26137] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.598657][T26137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:16 executing program 2 (fault-call:7 fault-nth:81): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:16 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="420000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fe00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 271.606623][T26137] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 271.669135][T26132] loop3: detected capacity change from 0 to 4 [ 271.675707][T26132] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.683549][T26153] FAULT_INJECTION: forcing a failure. [ 271.683549][T26153] name failslab, interval 1, probability 0, space 0, times 0 [ 271.697664][T26153] CPU: 0 PID: 26153 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 271.706815][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.716858][T26153] Call Trace: [ 271.720196][T26153] dump_stack+0x137/0x19d [ 271.724517][T26153] should_fail+0x23c/0x250 [ 271.728917][T26153] __should_failslab+0x81/0x90 [ 271.733925][T26153] ? io_req_defer_prep+0xd9/0x440 [ 271.738942][T26153] should_failslab+0x5/0x20 [ 271.743467][T26153] __kmalloc+0x66/0x360 [ 271.747787][T26153] io_req_defer_prep+0xd9/0x440 [ 271.752671][T26153] io_req_defer+0x157/0x470 [ 271.757165][T26153] io_queue_sqe+0x18/0x160 [ 271.761594][T26153] io_submit_sqe+0x15c7/0x30c0 [ 271.766339][T26153] ? kmem_cache_alloc_bulk+0x239/0x380 [ 271.771903][T26153] io_submit_sqes+0x61f/0xaf0 [ 271.776736][T26153] __se_sys_io_uring_enter+0x217/0xb20 [ 271.782630][T26153] ? fput+0x2d/0x130 [ 271.787558][T26153] __x64_sys_io_uring_enter+0x74/0x80 [ 271.792949][T26153] do_syscall_64+0x34/0x50 [ 271.797822][T26153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 271.803726][T26153] RIP: 0033:0x466459 [ 271.807620][T26153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 271.827338][T26153] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 271.835894][T26153] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 271.843937][T26153] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 271.851949][T26153] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 271.859899][T26153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:17 executing program 2 (fault-call:7 fault-nth:82): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 271.867861][T26153] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 271.893438][T26154] loop4: detected capacity change from 0 to 4 [ 271.900583][T26154] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 271.911266][T26160] loop5: detected capacity change from 0 to 4 02:47:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 271.916186][T26167] FAULT_INJECTION: forcing a failure. [ 271.916186][T26167] name failslab, interval 1, probability 0, space 0, times 0 [ 271.930031][T26167] CPU: 0 PID: 26167 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 271.938895][T26167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.944295][T26159] loop0: detected capacity change from 0 to 4 [ 271.949033][T26167] Call Trace: [ 271.949043][T26167] dump_stack+0x137/0x19d [ 271.949066][T26167] should_fail+0x23c/0x250 [ 271.949078][T26167] __should_failslab+0x81/0x90 [ 271.949095][T26167] ? io_req_defer+0x19c/0x470 [ 271.977557][T26167] should_failslab+0x5/0x20 [ 271.982141][T26167] kmem_cache_alloc_trace+0x49/0x320 [ 271.987515][T26167] ? io_req_defer_prep+0x218/0x440 [ 271.992723][T26167] io_req_defer+0x19c/0x470 [ 271.997214][T26167] io_queue_sqe+0x18/0x160 [ 272.001613][T26167] io_submit_sqe+0x15c7/0x30c0 [ 272.006375][T26167] ? kmem_cache_alloc_bulk+0x239/0x380 [ 272.011888][T26167] io_submit_sqes+0x61f/0xaf0 [ 272.016556][T26167] __se_sys_io_uring_enter+0x217/0xb20 [ 272.021998][T26167] ? fput+0x2d/0x130 [ 272.025905][T26167] __x64_sys_io_uring_enter+0x74/0x80 [ 272.031605][T26167] do_syscall_64+0x34/0x50 [ 272.036006][T26167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.041893][T26167] RIP: 0033:0x466459 [ 272.045782][T26167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 272.065369][T26167] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.073771][T26167] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 272.081826][T26167] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 272.089800][T26167] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 272.098023][T26167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.106252][T26167] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = dup2(r0, r0) dup2(r2, r1) 02:47:17 executing program 2 (fault-call:7 fault-nth:83): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 272.122508][T26160] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.169702][T26180] loop3: detected capacity change from 0 to 4 [ 272.176214][T26159] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.185887][T26180] EXT4-fs (loop3): can't read group descriptor 0 [ 272.192446][T26154] loop4: detected capacity change from 0 to 4 [ 272.202928][T26188] FAULT_INJECTION: forcing a failure. [ 272.202928][T26188] name failslab, interval 1, probability 0, space 0, times 0 [ 272.215577][T26188] CPU: 0 PID: 26188 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 272.224422][T26188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.230907][T26154] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.234549][T26188] Call Trace: [ 272.246527][T26160] loop5: detected capacity change from 0 to 4 [ 272.247135][T26188] dump_stack+0x137/0x19d [ 272.254090][T26160] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.257494][T26188] should_fail+0x23c/0x250 [ 272.257515][T26188] __should_failslab+0x81/0x90 [ 272.257534][T26188] should_failslab+0x5/0x20 [ 272.257551][T26188] kmem_cache_alloc_bulk+0x40/0x380 [ 272.285763][T26188] io_submit_sqes+0x515/0xaf0 [ 272.290460][T26188] __se_sys_io_uring_enter+0x217/0xb20 [ 272.295913][T26188] ? fput+0x2d/0x130 [ 272.299857][T26188] __x64_sys_io_uring_enter+0x74/0x80 [ 272.305230][T26188] do_syscall_64+0x34/0x50 [ 272.309628][T26188] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.315594][T26188] RIP: 0033:0x466459 [ 272.319482][T26188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 272.339115][T26188] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.347572][T26188] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 272.355548][T26188] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000a00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fe00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="430000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 272.363611][T26188] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 272.371706][T26188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.379939][T26188] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:17 executing program 2 (fault-call:7 fault-nth:84): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 272.429000][T26159] loop0: detected capacity change from 0 to 4 [ 272.442122][T26159] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.452839][T26212] loop5: detected capacity change from 0 to 4 [ 272.463268][T26208] loop3: detected capacity change from 0 to 4 [ 272.472127][T26212] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.481706][T26208] EXT4-fs (loop3): bad geometry: block count 10 exceeds size of device (1 blocks) [ 272.488803][T26220] FAULT_INJECTION: forcing a failure. [ 272.488803][T26220] name failslab, interval 1, probability 0, space 0, times 0 [ 272.492849][T26218] loop4: detected capacity change from 0 to 4 [ 272.504388][T26220] CPU: 1 PID: 26220 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 272.504412][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.504422][T26220] Call Trace: [ 272.533026][T26220] dump_stack+0x137/0x19d [ 272.537358][T26220] should_fail+0x23c/0x250 [ 272.541769][T26220] __should_failslab+0x81/0x90 [ 272.546796][T26220] ? io_req_defer_prep+0xd9/0x440 [ 272.551885][T26220] should_failslab+0x5/0x20 [ 272.556463][T26220] __kmalloc+0x66/0x360 [ 272.560604][T26220] io_req_defer_prep+0xd9/0x440 [ 272.568490][T26220] io_req_defer+0x157/0x470 [ 272.572977][T26220] io_queue_sqe+0x18/0x160 [ 272.577513][T26220] io_submit_sqe+0x15c7/0x30c0 [ 272.582303][T26220] ? kmem_cache_alloc_bulk+0x239/0x380 [ 272.587750][T26220] io_submit_sqes+0x61f/0xaf0 [ 272.592409][T26220] __se_sys_io_uring_enter+0x217/0xb20 [ 272.598625][T26220] ? fput+0x2d/0x130 [ 272.602579][T26220] __x64_sys_io_uring_enter+0x74/0x80 [ 272.608048][T26220] do_syscall_64+0x34/0x50 [ 272.612458][T26220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.618367][T26220] RIP: 0033:0x466459 [ 272.622251][T26220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 272.641847][T26220] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.650252][T26220] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 272.658207][T26220] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 272.666158][T26220] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:17 executing program 2 (fault-call:7 fault-nth:85): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 272.674184][T26220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.682375][T26220] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200402008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 272.722129][T26218] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.722940][T26208] loop3: detected capacity change from 0 to 4 [ 272.738947][T26212] loop5: detected capacity change from 0 to 4 [ 272.743687][T26231] FAULT_INJECTION: forcing a failure. [ 272.743687][T26231] name failslab, interval 1, probability 0, space 0, times 0 [ 272.757659][T26231] CPU: 0 PID: 26231 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 272.758942][T26212] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 272.766642][T26231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.766684][T26231] Call Trace: [ 272.789242][T26231] dump_stack+0x137/0x19d [ 272.793762][T26231] should_fail+0x23c/0x250 [ 272.798198][T26231] __should_failslab+0x81/0x90 [ 272.802960][T26231] ? io_req_defer+0x19c/0x470 [ 272.807743][T26231] should_failslab+0x5/0x20 [ 272.812276][T26231] kmem_cache_alloc_trace+0x49/0x320 [ 272.817634][T26231] ? io_req_defer_prep+0x218/0x440 [ 272.822815][T26231] io_req_defer+0x19c/0x470 [ 272.827302][T26231] io_queue_sqe+0x18/0x160 [ 272.831708][T26231] io_submit_sqe+0x15c7/0x30c0 [ 272.836464][T26231] ? kmem_cache_alloc_bulk+0x239/0x380 [ 272.841912][T26231] io_submit_sqes+0x61f/0xaf0 [ 272.846579][T26231] __se_sys_io_uring_enter+0x217/0xb20 [ 272.852062][T26231] ? fput+0x2d/0x130 [ 272.856052][T26231] __x64_sys_io_uring_enter+0x74/0x80 [ 272.861508][T26231] do_syscall_64+0x34/0x50 [ 272.865924][T26231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.871817][T26231] RIP: 0033:0x466459 [ 272.875735][T26231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 272.895741][T26231] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 272.904303][T26231] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 272.912262][T26231] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 02:47:18 executing program 2 (fault-call:7 fault-nth:86): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 272.920217][T26231] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 272.928186][T26231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.936150][T26231] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:18 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="440000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 272.982836][T26208] EXT4-fs (loop3): bad geometry: block count 10 exceeds size of device (1 blocks) [ 273.010886][T26218] loop4: detected capacity change from 0 to 4 [ 273.017193][T26245] loop5: detected capacity change from 0 to 4 [ 273.020977][T26248] FAULT_INJECTION: forcing a failure. 02:47:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 273.020977][T26248] name failslab, interval 1, probability 0, space 0, times 0 [ 273.036401][T26248] CPU: 1 PID: 26248 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 273.045170][T26248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.055223][T26248] Call Trace: [ 273.058505][T26248] dump_stack+0x137/0x19d [ 273.062836][T26248] should_fail+0x23c/0x250 [ 273.065410][T26218] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.067256][T26248] __should_failslab+0x81/0x90 [ 273.067281][T26248] ? io_req_defer_prep+0xd9/0x440 [ 273.086374][T26248] should_failslab+0x5/0x20 [ 273.090944][T26248] __kmalloc+0x66/0x360 [ 273.094104][T26241] loop0: detected capacity change from 0 to 4 [ 273.095180][T26248] io_req_defer_prep+0xd9/0x440 [ 273.106070][T26248] io_req_defer+0x157/0x470 [ 273.109327][T26241] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.110570][T26248] io_queue_sqe+0x18/0x160 [ 273.110602][T26248] io_submit_sqe+0x15c7/0x30c0 [ 273.110622][T26248] ? kmem_cache_alloc_bulk+0x239/0x380 [ 273.110639][T26248] io_submit_sqes+0x61f/0xaf0 [ 273.126061][T26245] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.129129][T26248] __se_sys_io_uring_enter+0x217/0xb20 [ 273.154340][T26248] ? fput+0x2d/0x130 [ 273.158230][T26248] __x64_sys_io_uring_enter+0x74/0x80 [ 273.164134][T26248] do_syscall_64+0x34/0x50 [ 273.168578][T26248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 273.175601][T26248] RIP: 0033:0x466459 [ 273.179485][T26248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 273.199167][T26248] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 273.208085][T26248] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 273.216045][T26248] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 273.224391][T26248] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:18 executing program 2 (fault-call:7 fault-nth:87): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200402008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 273.232436][T26248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.240405][T26248] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 273.289106][T26245] loop5: detected capacity change from 0 to 4 [ 273.290985][T26267] FAULT_INJECTION: forcing a failure. [ 273.290985][T26267] name failslab, interval 1, probability 0, space 0, times 0 [ 273.296007][T26241] loop0: detected capacity change from 0 to 4 [ 273.307863][T26267] CPU: 1 PID: 26267 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 273.307882][T26267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.307890][T26267] Call Trace: [ 273.307897][T26267] dump_stack+0x137/0x19d [ 273.307915][T26267] should_fail+0x23c/0x250 [ 273.344903][T26267] __should_failslab+0x81/0x90 [ 273.349700][T26267] ? io_req_defer+0x19c/0x470 [ 273.354386][T26267] should_failslab+0x5/0x20 [ 273.358894][T26267] kmem_cache_alloc_trace+0x49/0x320 [ 273.364208][T26267] ? io_req_defer_prep+0x218/0x440 [ 273.369320][T26267] io_req_defer+0x19c/0x470 [ 273.373807][T26267] io_queue_sqe+0x18/0x160 [ 273.378283][T26267] io_submit_sqe+0x15c7/0x30c0 [ 273.383048][T26267] ? kmem_cache_alloc_bulk+0x239/0x380 [ 273.388559][T26267] io_submit_sqes+0x61f/0xaf0 [ 273.393222][T26267] __se_sys_io_uring_enter+0x217/0xb20 [ 273.398663][T26267] ? fput+0x2d/0x130 [ 273.402573][T26267] __x64_sys_io_uring_enter+0x74/0x80 [ 273.407959][T26267] do_syscall_64+0x34/0x50 [ 273.412369][T26267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 273.418437][T26267] RIP: 0033:0x466459 [ 273.422615][T26267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 273.443616][T26267] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 273.452334][T26267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 273.460299][T26267] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 273.468349][T26267] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 273.476475][T26267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000006400000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:18 executing program 2 (fault-call:7 fault-nth:88): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 273.484453][T26267] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 273.495078][T26245] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.520922][T26241] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.554581][T26278] FAULT_INJECTION: forcing a failure. [ 273.554581][T26278] name failslab, interval 1, probability 0, space 0, times 0 [ 273.567316][T26278] CPU: 1 PID: 26278 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 273.570267][T26274] loop4: detected capacity change from 0 to 4 [ 273.576074][T26278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.576087][T26278] Call Trace: [ 273.576094][T26278] dump_stack+0x137/0x19d [ 273.589586][T26274] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 273.592554][T26278] should_fail+0x23c/0x250 [ 273.592575][T26278] __should_failslab+0x81/0x90 [ 273.592594][T26278] ? io_req_defer_prep+0xd9/0x440 [ 273.623846][T26278] should_failslab+0x5/0x20 [ 273.628343][T26278] __kmalloc+0x66/0x360 [ 273.632497][T26278] io_req_defer_prep+0xd9/0x440 [ 273.637422][T26278] io_req_defer+0x157/0x470 [ 273.642178][T26278] io_queue_sqe+0x18/0x160 [ 273.647165][T26278] io_submit_sqe+0x15c7/0x30c0 [ 273.652025][T26278] ? kmem_cache_alloc_bulk+0x239/0x380 [ 273.657511][T26278] io_submit_sqes+0x61f/0xaf0 [ 273.662177][T26278] __se_sys_io_uring_enter+0x217/0xb20 [ 273.667685][T26278] ? fput+0x2d/0x130 [ 273.671707][T26278] __x64_sys_io_uring_enter+0x74/0x80 [ 273.685609][T26278] do_syscall_64+0x34/0x50 [ 273.690283][T26278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 273.696257][T26278] RIP: 0033:0x466459 [ 273.700141][T26278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 273.719738][T26278] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 273.728253][T26278] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 273.736237][T26278] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 273.744294][T26278] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:19 executing program 2 (fault-call:7 fault-nth:89): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 273.752447][T26278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.760499][T26278] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="450000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 273.809278][T26282] loop3: detected capacity change from 0 to 4 [ 273.813446][T26288] FAULT_INJECTION: forcing a failure. [ 273.813446][T26288] name failslab, interval 1, probability 0, space 0, times 0 [ 273.828122][T26288] CPU: 1 PID: 26288 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 273.837024][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.839937][T26274] loop4: detected capacity change from 0 to 4 [ 273.847069][T26288] Call Trace: [ 273.847079][T26288] dump_stack+0x137/0x19d [ 273.861477][T26288] should_fail+0x23c/0x250 [ 273.865911][T26288] __should_failslab+0x81/0x90 [ 273.870712][T26288] ? io_req_defer+0x19c/0x470 [ 273.875394][T26288] should_failslab+0x5/0x20 [ 273.879904][T26288] kmem_cache_alloc_trace+0x49/0x320 [ 273.885272][T26288] ? io_req_defer_prep+0x218/0x440 [ 273.890405][T26288] io_req_defer+0x19c/0x470 [ 273.895341][T26288] io_queue_sqe+0x18/0x160 [ 273.899825][T26288] io_submit_sqe+0x15c7/0x30c0 [ 273.904589][T26288] ? kmem_cache_alloc_bulk+0x239/0x380 [ 273.910288][T26288] io_submit_sqes+0x61f/0xaf0 [ 273.915018][T26288] __se_sys_io_uring_enter+0x217/0xb20 [ 273.920476][T26288] ? fput+0x2d/0x130 [ 273.924360][T26288] __x64_sys_io_uring_enter+0x74/0x80 [ 273.929809][T26288] do_syscall_64+0x34/0x50 [ 273.934288][T26288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 273.940279][T26288] RIP: 0033:0x466459 [ 273.944164][T26288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 273.963822][T26288] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 273.972286][T26288] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 273.980251][T26288] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 273.988213][T26288] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 273.996170][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) open_by_handle_at(r1, &(0x7f0000000080)=@ocfs2={0xc, 0x1, {0xffff, 0xffff, 0x3}}, 0x801) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000240)={0x0, 0x8, 0xffff}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0x10, 0x2, {0x1, @usage=0x100000000, 0x0, 0x0, 0x8b, 0x9, 0x1, 0x5f, 0x48c, @struct={0x9d6, 0x7f}, 0x7f, 0xfffffbff, [0x3, 0x800, 0x2, 0x2, 0x100000001, 0x1]}, {0x9, @usage=0x100000000, r3, 0xffffffffffffc117, 0xfe, 0x0, 0x7fffffff, 0x1000, 0x1, @struct={0x1, 0x1000}, 0x200, 0x1, [0x9, 0x94b1, 0xffff, 0x9, 0x1, 0xffffffff]}, {0x7fffffff, @usage=0x1, 0x0, 0x1000, 0x4, 0xffffffffffff2d8e, 0x100000000, 0x6, 0x400, @struct={0xff, 0xfffffffb}, 0x9, 0x8469, [0x6, 0xfc000, 0x8, 0xd55, 0x6c5e6248, 0x400]}, {0x800, 0x20, 0x5}}) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) [ 274.004673][T26288] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 274.014419][T26282] EXT4-fs (loop3): bad geometry: block count 100 exceeds size of device (1 blocks) [ 274.024455][T26295] loop0: detected capacity change from 0 to 4 [ 274.050351][T26274] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:19 executing program 2 (fault-call:7 fault-nth:90): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 274.077625][T26295] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 274.099512][T26308] loop5: detected capacity change from 0 to 4 [ 274.110569][T26308] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="460000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 274.140089][T26314] FAULT_INJECTION: forcing a failure. [ 274.140089][T26314] name failslab, interval 1, probability 0, space 0, times 0 [ 274.152851][T26314] CPU: 1 PID: 26314 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 274.161707][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.172716][T26314] Call Trace: [ 274.175997][T26314] dump_stack+0x137/0x19d [ 274.180333][T26314] should_fail+0x23c/0x250 [ 274.184742][T26314] __should_failslab+0x81/0x90 [ 274.189512][T26314] ? io_req_defer_prep+0xd9/0x440 [ 274.194551][T26314] should_failslab+0x5/0x20 [ 274.199147][T26314] __kmalloc+0x66/0x360 [ 274.203307][T26314] io_req_defer_prep+0xd9/0x440 [ 274.208166][T26314] io_req_defer+0x157/0x470 [ 274.211464][T26320] loop5: detected capacity change from 0 to 4 [ 274.212670][T26314] io_queue_sqe+0x18/0x160 [ 274.212698][T26314] io_submit_sqe+0x15c7/0x30c0 [ 274.228147][T26314] ? kmem_cache_alloc_bulk+0x239/0x380 [ 274.228922][T26320] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 274.233607][T26314] io_submit_sqes+0x61f/0xaf0 [ 274.233636][T26314] __se_sys_io_uring_enter+0x217/0xb20 [ 274.253449][T26314] ? fput+0x2d/0x130 [ 274.257413][T26314] __x64_sys_io_uring_enter+0x74/0x80 [ 274.262787][T26314] do_syscall_64+0x34/0x50 [ 274.267329][T26314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 274.269149][T26329] loop4: detected capacity change from 0 to 4 [ 274.273338][T26314] RIP: 0033:0x466459 [ 274.273354][T26314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.273371][T26314] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 274.273388][T26314] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 274.273399][T26314] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 274.273410][T26314] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 02:47:19 executing program 2 (fault-call:7 fault-nth:91): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 274.286471][T26329] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 274.303098][T26314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.303116][T26314] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 274.390999][T26282] loop3: detected capacity change from 0 to 4 [ 274.403306][T26295] loop0: detected capacity change from 0 to 4 [ 274.406177][T26343] FAULT_INJECTION: forcing a failure. [ 274.406177][T26343] name failslab, interval 1, probability 0, space 0, times 0 [ 274.418419][T26329] loop4: detected capacity change from 0 to 4 [ 274.422023][T26343] CPU: 1 PID: 26343 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 274.428633][T26320] loop5: detected capacity change from 0 to 4 [ 274.437093][T26343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.437107][T26343] Call Trace: [ 274.437114][T26343] dump_stack+0x137/0x19d [ 274.437136][T26343] should_fail+0x23c/0x250 [ 274.466117][T26343] __should_failslab+0x81/0x90 [ 274.470906][T26343] ? io_req_defer+0x19c/0x470 [ 274.475571][T26343] should_failslab+0x5/0x20 [ 274.481014][T26343] kmem_cache_alloc_trace+0x49/0x320 [ 274.486280][T26343] ? io_req_defer_prep+0x218/0x440 [ 274.491376][T26343] io_req_defer+0x19c/0x470 [ 274.495864][T26343] io_queue_sqe+0x18/0x160 [ 274.500438][T26343] io_submit_sqe+0x15c7/0x30c0 [ 274.505187][T26343] ? kmem_cache_alloc_bulk+0x239/0x380 [ 274.510717][T26343] io_submit_sqes+0x61f/0xaf0 [ 274.515388][T26343] __se_sys_io_uring_enter+0x217/0xb20 [ 274.520832][T26343] ? fput+0x2d/0x130 [ 274.524767][T26343] __x64_sys_io_uring_enter+0x74/0x80 [ 274.530246][T26343] do_syscall_64+0x34/0x50 [ 274.534657][T26343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 274.540544][T26343] RIP: 0033:0x466459 [ 274.544417][T26343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.564115][T26343] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 274.576512][T26343] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 274.584522][T26343] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 274.592485][T26343] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 274.600450][T26343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.608401][T26343] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 274.617667][T26282] EXT4-fs (loop3): bad geometry: block count 100 exceeds size of device (1 blocks) [ 274.627270][T26329] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:19 executing program 2 (fault-call:7 fault-nth:92): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:19 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="470000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200204008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 274.657041][T26295] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 274.671562][T26356] FAULT_INJECTION: forcing a failure. [ 274.671562][T26356] name failslab, interval 1, probability 0, space 0, times 0 [ 274.684363][T26356] CPU: 1 PID: 26356 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 274.693125][T26356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.703253][T26356] Call Trace: [ 274.706521][T26356] dump_stack+0x137/0x19d [ 274.710852][T26356] should_fail+0x23c/0x250 [ 274.715344][T26356] __should_failslab+0x81/0x90 [ 274.720183][T26356] ? io_req_defer_prep+0xd9/0x440 [ 274.725187][T26356] should_failslab+0x5/0x20 [ 274.729706][T26356] __kmalloc+0x66/0x360 [ 274.733848][T26356] io_req_defer_prep+0xd9/0x440 [ 274.738694][T26356] io_req_defer+0x157/0x470 [ 274.743396][T26356] io_queue_sqe+0x18/0x160 [ 274.747796][T26356] io_submit_sqe+0x15c7/0x30c0 [ 274.752629][T26356] ? kmem_cache_alloc_bulk+0x239/0x380 [ 274.758075][T26356] io_submit_sqes+0x61f/0xaf0 [ 274.762756][T26356] __se_sys_io_uring_enter+0x217/0xb20 [ 274.768301][T26356] ? fput+0x2d/0x130 [ 274.772184][T26356] __x64_sys_io_uring_enter+0x74/0x80 [ 274.777539][T26356] do_syscall_64+0x34/0x50 [ 274.782038][T26356] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 274.787913][T26356] RIP: 0033:0x466459 [ 274.791784][T26356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 274.811370][T26356] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 274.819766][T26356] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 274.827727][T26356] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 274.835721][T26356] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 274.843845][T26356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:20 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200204008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:20 executing program 2 (fault-call:7 fault-nth:93): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 274.851826][T26356] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 274.908321][T26366] loop3: detected capacity change from 0 to 4 [ 274.924245][T26370] FAULT_INJECTION: forcing a failure. [ 274.924245][T26370] name failslab, interval 1, probability 0, space 0, times 0 [ 274.936861][T26370] CPU: 1 PID: 26370 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 274.945629][T26370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.955683][T26370] Call Trace: [ 274.958953][T26370] dump_stack+0x137/0x19d [ 274.963299][T26370] should_fail+0x23c/0x250 [ 274.967718][T26370] __should_failslab+0x81/0x90 [ 274.972950][T26370] ? io_req_defer+0x19c/0x470 [ 274.977644][T26370] should_failslab+0x5/0x20 [ 274.982143][T26370] kmem_cache_alloc_trace+0x49/0x320 [ 274.987429][T26370] ? io_req_defer_prep+0x218/0x440 [ 274.992615][T26370] io_req_defer+0x19c/0x470 [ 274.997191][T26370] io_queue_sqe+0x18/0x160 [ 275.001589][T26370] io_submit_sqe+0x15c7/0x30c0 [ 275.006336][T26370] ? kmem_cache_alloc_bulk+0x239/0x380 [ 275.011786][T26370] io_submit_sqes+0x61f/0xaf0 [ 275.016550][T26370] __se_sys_io_uring_enter+0x217/0xb20 [ 275.021997][T26370] ? fput+0x2d/0x130 [ 275.025911][T26370] __x64_sys_io_uring_enter+0x74/0x80 [ 275.031322][T26370] do_syscall_64+0x34/0x50 [ 275.035810][T26370] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.041686][T26370] RIP: 0033:0x466459 [ 275.045573][T26370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.065192][T26370] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 275.073714][T26370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 275.081677][T26370] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 275.089629][T26370] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.097695][T26370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:20 executing program 2 (fault-call:7 fault-nth:94): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/187, &(0x7f00000000c0)=0xbb) sendto$inet6(r0, 0x0, 0x0, 0x48c14, &(0x7f0000b63fe4)={0xa, 0x4e23, 0xfffffefd, @mcast1, 0x1f}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001480)=""/207, 0xcf}], 0x1, 0x5, 0x0) [ 275.105715][T26370] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 275.124032][T26376] loop0: detected capacity change from 0 to 4 [ 275.124072][T26363] loop5: detected capacity change from 0 to 4 [ 275.127055][T26362] loop4: detected capacity change from 0 to 4 [ 275.145659][T26363] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.158374][T26376] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.169668][T26386] FAULT_INJECTION: forcing a failure. [ 275.169668][T26386] name failslab, interval 1, probability 0, space 0, times 0 [ 275.182384][T26386] CPU: 1 PID: 26386 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 275.182530][T26366] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.191401][T26386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.191413][T26386] Call Trace: [ 275.191421][T26386] dump_stack+0x137/0x19d [ 275.191444][T26386] should_fail+0x23c/0x250 [ 275.191457][T26386] __should_failslab+0x81/0x90 [ 275.191491][T26386] ? io_req_defer_prep+0xd9/0x440 [ 275.213503][T26362] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.215922][T26386] should_failslab+0x5/0x20 [ 275.248816][T26386] __kmalloc+0x66/0x360 [ 275.252977][T26386] io_req_defer_prep+0xd9/0x440 [ 275.257848][T26386] io_req_defer+0x157/0x470 [ 275.262453][T26386] io_queue_sqe+0x18/0x160 [ 275.267081][T26386] io_submit_sqe+0x15c7/0x30c0 [ 275.272959][T26386] ? kmem_cache_alloc_bulk+0x239/0x380 [ 275.278573][T26386] io_submit_sqes+0x61f/0xaf0 [ 275.283234][T26386] __se_sys_io_uring_enter+0x217/0xb20 [ 275.288838][T26386] ? fput+0x2d/0x130 [ 275.292797][T26386] ? __fpregs_load_activate+0x103/0x1b0 [ 275.298569][T26386] __x64_sys_io_uring_enter+0x74/0x80 [ 275.304049][T26386] do_syscall_64+0x34/0x50 [ 275.308683][T26386] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.314745][T26386] RIP: 0033:0x466459 [ 275.318658][T26386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.338250][T26386] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 275.346664][T26386] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 02:47:20 executing program 2 (fault-call:7 fault-nth:95): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 275.354648][T26386] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 275.362640][T26386] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.370606][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.378571][T26386] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 275.419771][T26366] loop3: detected capacity change from 0 to 4 [ 275.430438][T26376] loop0: detected capacity change from 0 to 4 [ 275.443783][T26366] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.463562][T26363] loop5: detected capacity change from 0 to 4 02:47:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/263, 0x107}], 0x1, 0x1, 0x1) [ 275.464211][T26404] FAULT_INJECTION: forcing a failure. [ 275.464211][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 275.476897][T26376] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.482249][T26404] CPU: 1 PID: 26404 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 275.482268][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.500481][T26362] loop4: detected capacity change from 0 to 4 [ 275.510401][T26404] Call Trace: [ 275.510413][T26404] dump_stack+0x137/0x19d [ 275.510435][T26404] should_fail+0x23c/0x250 [ 275.528454][T26404] __should_failslab+0x81/0x90 [ 275.533224][T26404] ? io_req_defer+0x19c/0x470 [ 275.537891][T26404] should_failslab+0x5/0x20 [ 275.542824][T26404] kmem_cache_alloc_trace+0x49/0x320 [ 275.548092][T26404] ? io_req_defer_prep+0x218/0x440 [ 275.553329][T26404] io_req_defer+0x19c/0x470 [ 275.557909][T26404] io_queue_sqe+0x18/0x160 [ 275.562343][T26404] io_submit_sqe+0x15c7/0x30c0 [ 275.567282][T26404] ? kmem_cache_alloc_bulk+0x239/0x380 [ 275.573512][T26404] io_submit_sqes+0x61f/0xaf0 [ 275.578275][T26404] __se_sys_io_uring_enter+0x217/0xb20 [ 275.583728][T26404] ? fput+0x2d/0x130 [ 275.587663][T26404] __x64_sys_io_uring_enter+0x74/0x80 [ 275.593026][T26404] do_syscall_64+0x34/0x50 [ 275.597519][T26404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.603400][T26404] RIP: 0033:0x466459 [ 275.607284][T26404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.626872][T26404] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 275.635266][T26404] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 275.643263][T26404] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 275.651288][T26404] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.659324][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 02:47:21 executing program 2 (fault-call:7 fault-nth:96): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200604008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="480000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200604008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 275.667293][T26404] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 275.676184][T26363] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.689527][T26362] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 275.756882][T26419] FAULT_INJECTION: forcing a failure. [ 275.756882][T26419] name failslab, interval 1, probability 0, space 0, times 0 [ 275.769758][T26419] CPU: 0 PID: 26419 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 275.778522][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.788565][T26419] Call Trace: [ 275.791829][T26419] dump_stack+0x137/0x19d [ 275.796143][T26419] should_fail+0x23c/0x250 [ 275.800709][T26419] __should_failslab+0x81/0x90 [ 275.805451][T26419] ? io_req_defer_prep+0xd9/0x440 [ 275.810471][T26419] should_failslab+0x5/0x20 [ 275.815053][T26419] __kmalloc+0x66/0x360 [ 275.819187][T26419] io_req_defer_prep+0xd9/0x440 [ 275.824020][T26419] io_req_defer+0x157/0x470 [ 275.828768][T26419] io_queue_sqe+0x18/0x160 [ 275.833180][T26419] io_submit_sqe+0x15c7/0x30c0 [ 275.837924][T26419] ? kmem_cache_alloc_bulk+0x239/0x380 [ 275.843370][T26419] io_submit_sqes+0x61f/0xaf0 [ 275.848102][T26419] __se_sys_io_uring_enter+0x217/0xb20 [ 275.853559][T26419] ? fput+0x2d/0x130 [ 275.857437][T26419] __x64_sys_io_uring_enter+0x74/0x80 [ 275.862833][T26419] do_syscall_64+0x34/0x50 [ 275.867256][T26419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 275.873236][T26419] RIP: 0033:0x466459 [ 275.877516][T26419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.897109][T26419] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 02:47:21 executing program 2 (fault-call:7 fault-nth:97): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 275.905515][T26419] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 275.913467][T26419] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 275.921527][T26419] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 275.929522][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.937578][T26419] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 276.012307][T26424] loop3: detected capacity change from 0 to 4 [ 276.022529][T26424] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.048005][T26433] loop4: detected capacity change from 0 to 4 [ 276.055306][T26435] loop0: detected capacity change from 0 to 4 [ 276.072972][T26424] loop3: detected capacity change from 0 to 4 [ 276.079441][T26445] loop5: detected capacity change from 0 to 4 [ 276.085625][T26424] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.086846][T26435] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.095830][T26442] FAULT_INJECTION: forcing a failure. [ 276.095830][T26442] name failslab, interval 1, probability 0, space 0, times 0 [ 276.117780][T26442] CPU: 1 PID: 26442 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 276.119974][T26433] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.129598][T26442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.129613][T26442] Call Trace: [ 276.129620][T26442] dump_stack+0x137/0x19d [ 276.156531][T26442] should_fail+0x23c/0x250 [ 276.158158][T26445] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.160963][T26442] __should_failslab+0x81/0x90 [ 276.160989][T26442] ? io_req_defer+0x19c/0x470 [ 276.179989][T26442] should_failslab+0x5/0x20 [ 276.184604][T26442] kmem_cache_alloc_trace+0x49/0x320 [ 276.189921][T26442] ? io_req_defer_prep+0x218/0x440 [ 276.195021][T26442] io_req_defer+0x19c/0x470 [ 276.199575][T26442] io_queue_sqe+0x18/0x160 [ 276.204096][T26442] io_submit_sqe+0x15c7/0x30c0 [ 276.208840][T26442] ? kmem_cache_alloc_bulk+0x239/0x380 [ 276.214293][T26442] io_submit_sqes+0x61f/0xaf0 [ 276.218986][T26442] __se_sys_io_uring_enter+0x217/0xb20 [ 276.224428][T26442] ? fput+0x2d/0x130 [ 276.228352][T26442] __x64_sys_io_uring_enter+0x74/0x80 [ 276.233747][T26442] do_syscall_64+0x34/0x50 [ 276.238205][T26442] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.244137][T26442] RIP: 0033:0x466459 [ 276.248274][T26442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:47:21 executing program 2 (fault-call:7 fault-nth:98): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) 02:47:21 executing program 1: setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "abd844ecd3671806", "433bb09f95ed4f1937b132ca584503a7", "4fa3695f", "7212c5174178392b"}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 276.268576][T26442] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 276.276987][T26442] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 276.284953][T26442] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 276.293037][T26442] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 276.301054][T26442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.309480][T26442] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 276.353926][T26433] loop4: detected capacity change from 0 to 4 [ 276.368596][T26435] loop0: detected capacity change from 0 to 4 [ 276.375086][T26433] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.385324][T26445] loop5: detected capacity change from 0 to 4 [ 276.392002][T26445] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.394318][T26468] FAULT_INJECTION: forcing a failure. [ 276.394318][T26468] name failslab, interval 1, probability 0, space 0, times 0 [ 276.414741][T26468] CPU: 0 PID: 26468 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 276.414953][T26435] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.423843][T26468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.423858][T26468] Call Trace: [ 276.423865][T26468] dump_stack+0x137/0x19d [ 276.423887][T26468] should_fail+0x23c/0x250 [ 276.456772][T26468] __should_failslab+0x81/0x90 [ 276.461551][T26468] ? io_req_defer_prep+0xd9/0x440 [ 276.466555][T26468] should_failslab+0x5/0x20 [ 276.471069][T26468] __kmalloc+0x66/0x360 [ 276.475223][T26468] io_req_defer_prep+0xd9/0x440 [ 276.480667][T26468] io_req_defer+0x157/0x470 [ 276.485815][T26468] io_queue_sqe+0x18/0x160 [ 276.490468][T26468] io_submit_sqe+0x15c7/0x30c0 [ 276.496280][T26468] ? kmem_cache_alloc_bulk+0x239/0x380 [ 276.502158][T26468] io_submit_sqes+0x61f/0xaf0 [ 276.506909][T26468] __se_sys_io_uring_enter+0x217/0xb20 [ 276.512496][T26468] ? fput+0x2d/0x130 [ 276.516670][T26468] __x64_sys_io_uring_enter+0x74/0x80 [ 276.522156][T26468] do_syscall_64+0x34/0x50 [ 276.526566][T26468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.532445][T26468] RIP: 0033:0x466459 [ 276.536317][T26468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 276.556373][T26468] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 276.564804][T26468] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 276.572812][T26468] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 276.580764][T26468] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 276.588873][T26468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.596933][T26468] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 02:47:21 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="490000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 276.624154][T26470] loop3: detected capacity change from 0 to 4 02:47:21 executing program 2 (fault-call:7 fault-nth:99): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 276.667304][T26470] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.716683][T26488] loop0: detected capacity change from 0 to 4 [ 276.719995][T26491] FAULT_INJECTION: forcing a failure. [ 276.719995][T26491] name failslab, interval 1, probability 0, space 0, times 0 [ 276.735746][T26491] CPU: 0 PID: 26491 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 276.744203][T26489] loop5: detected capacity change from 0 to 4 [ 276.744562][T26491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.760842][T26491] Call Trace: [ 276.764118][T26491] dump_stack+0x137/0x19d [ 276.768442][T26491] should_fail+0x23c/0x250 [ 276.772935][T26491] __should_failslab+0x81/0x90 [ 276.777850][T26491] ? io_req_defer+0x19c/0x470 [ 276.782703][T26491] should_failslab+0x5/0x20 [ 276.787282][T26491] kmem_cache_alloc_trace+0x49/0x320 [ 276.792834][T26491] ? io_req_defer_prep+0x218/0x440 [ 276.798041][T26491] io_req_defer+0x19c/0x470 [ 276.802618][T26491] io_queue_sqe+0x18/0x160 [ 276.807122][T26491] io_submit_sqe+0x15c7/0x30c0 [ 276.812049][T26491] ? kmem_cache_alloc_bulk+0x239/0x380 [ 276.817591][T26491] io_submit_sqes+0x61f/0xaf0 [ 276.822254][T26491] __se_sys_io_uring_enter+0x217/0xb20 [ 276.827797][T26491] ? fput+0x2d/0x130 [ 276.831775][T26491] __x64_sys_io_uring_enter+0x74/0x80 [ 276.837215][T26491] do_syscall_64+0x34/0x50 [ 276.841625][T26491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 276.847561][T26491] RIP: 0033:0x466459 [ 276.851439][T26491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 276.871212][T26491] RSP: 002b:00007f1dc5372188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 276.879627][T26491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 276.888101][T26491] RDX: 0000000000000000 RSI: 0000000000000302 RDI: 0000000000000005 [ 276.896119][T26491] RBP: 00007f1dc53721d0 R08: 0000000000000000 R09: 0000000000000000 [ 276.904071][T26491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 02:47:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 276.912109][T26491] R13: 00007ffe3954a9ff R14: 00007f1dc5372300 R15: 0000000000022000 [ 276.933404][T26488] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.945508][T26489] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 276.951593][T26490] loop4: detected capacity change from 0 to 4 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x302, 0x0, 0x0, 0x0, 0x0) [ 276.970561][T26490] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.008848][T26504] loop3: detected capacity change from 0 to 4 [ 277.019490][T26488] loop0: detected capacity change from 0 to 4 [ 277.026215][T26504] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.028391][T26489] loop5: detected capacity change from 0 to 4 [ 277.044656][T26488] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.054071][T26490] loop4: detected capacity change from 0 to 4 [ 277.061057][T26489] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) 02:47:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) [ 277.099743][T26490] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.112910][T26504] loop3: detected capacity change from 0 to 4 02:47:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4b0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 277.150478][T26504] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x402) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000040)=""/204, 0xcc}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000240)=""/235, 0xeb}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000440)=""/227, 0xe3}], 0x5, 0x7, 0x7) 02:47:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4, 0x0, 0x0, 0x0, 0x0) 02:47:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200600008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 277.207962][T26544] loop0: detected capacity change from 0 to 4 [ 277.219323][T26544] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.230439][T26548] loop5: detected capacity change from 0 to 4 [ 277.240292][T26548] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5, 0x0, 0x0, 0x0, 0x0) 02:47:22 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="4c0000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 277.318120][T26564] loop4: detected capacity change from 0 to 4 [ 277.319637][T26568] loop3: detected capacity change from 0 to 4 [ 277.330377][T26564] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.351107][T26544] loop0: detected capacity change from 0 to 4 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) [ 277.370895][T26544] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.390019][T26568] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.392283][T26564] loop4: detected capacity change from 0 to 4 [ 277.399388][T26587] loop5: detected capacity change from 0 to 4 02:47:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7, 0x0, 0x0, 0x0, 0x0) 02:47:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 277.436800][T26564] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.448187][T26587] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.465373][T26568] loop3: detected capacity change from 0 to 4 [ 277.506510][T26608] loop0: detected capacity change from 0 to 4 [ 277.519907][T26568] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.520799][T26587] loop5: detected capacity change from 0 to 4 [ 277.537735][T26608] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:22 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8, 0x0, 0x0, 0x0, 0x0) 02:47:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200700008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 277.555090][T26587] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.617398][T26624] loop4: detected capacity change from 0 to 4 [ 277.623600][T26608] loop0: detected capacity change from 0 to 4 [ 277.633990][T26624] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.646078][T26608] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.683022][T26624] loop4: detected capacity change from 0 to 4 [ 277.684104][T26640] loop3: detected capacity change from 0 to 4 [ 277.696124][T26624] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.711775][T26640] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 277.761873][T26640] loop3: detected capacity change from 0 to 4 [ 277.772954][T26640] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = fork() tkill(r1, 0x16) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9, 0x0, 0x0, 0x0, 0x0) 02:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="004000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200406008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200406008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 278.227278][T26673] loop0: detected capacity change from 0 to 4 [ 278.229694][T26674] loop4: detected capacity change from 0 to 4 [ 278.243551][T26675] loop3: detected capacity change from 0 to 4 [ 278.243627][T26678] loop5: detected capacity change from 0 to 4 [ 278.260411][T26673] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa, 0x0, 0x0, 0x0, 0x0) [ 278.274920][T26678] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.278277][T26675] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.302956][T26674] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.307684][T26678] loop5: detected capacity change from 0 to 4 [ 278.327260][T26673] loop0: detected capacity change from 0 to 4 [ 278.335934][T26678] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.345792][T26673] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.356941][T26675] loop3: detected capacity change from 0 to 4 [ 278.368045][T26675] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:23 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb, 0x0, 0x0, 0x0, 0x0) 02:47:23 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000100000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 278.377627][T26674] loop4: detected capacity change from 0 to 4 [ 278.390072][T26674] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 278.445247][T26727] loop0: detected capacity change from 0 to 4 [ 278.457483][T26727] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.476278][T26726] loop5: detected capacity change from 0 to 4 [ 278.507933][T26738] loop4: detected capacity change from 0 to 4 [ 278.514426][T26726] EXT4-fs (loop5): can't read group descriptor 0 [ 278.522443][T26738] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.524061][T26742] loop3: detected capacity change from 0 to 4 [ 278.532910][T26727] loop0: detected capacity change from 0 to 4 [ 278.548525][T26742] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.558446][T26727] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.564070][T26726] loop5: detected capacity change from 0 to 4 [ 278.577049][T26726] EXT4-fs (loop5): can't read group descriptor 0 [ 278.584225][T26738] loop4: detected capacity change from 0 to 4 [ 278.591208][T26738] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 278.639043][T26742] loop3: detected capacity change from 0 to 4 [ 278.653218][T26742] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 02:47:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc, 0x0, 0x0, 0x0, 0x0) 02:47:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000000a00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd, 0x0, 0x0, 0x0, 0x0) [ 279.151429][T26784] loop3: detected capacity change from 0 to 4 [ 279.152537][T26782] loop5: detected capacity change from 0 to 4 [ 279.164194][T26784] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.175119][T26788] loop4: detected capacity change from 0 to 4 [ 279.183493][T26790] loop0: detected capacity change from 0 to 4 [ 279.189878][T26782] EXT4-fs (loop5): bad geometry: block count 10 exceeds size of device (1 blocks) [ 279.230307][T26788] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.232840][T26782] loop5: detected capacity change from 0 to 4 [ 279.248137][T26784] loop3: detected capacity change from 0 to 4 [ 279.256074][T26790] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe, 0x0, 0x0, 0x0, 0x0) [ 279.271692][T26784] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.282009][T26788] loop4: detected capacity change from 0 to 4 [ 279.282093][T26782] EXT4-fs (loop5): bad geometry: block count 10 exceeds size of device (1 blocks) [ 279.297661][T26788] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200b00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000006400000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 279.362783][T26790] loop0: detected capacity change from 0 to 4 [ 279.399680][T26790] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:24 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xf, 0x0, 0x0, 0x0, 0x0) [ 279.430757][T26836] loop4: detected capacity change from 0 to 4 [ 279.451783][T26838] loop5: detected capacity change from 0 to 4 [ 279.459003][T26836] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.468948][T26839] loop3: detected capacity change from 0 to 4 [ 279.480236][T26838] EXT4-fs (loop5): bad geometry: block count 100 exceeds size of device (1 blocks) [ 279.494306][T26839] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.525948][T26836] loop4: detected capacity change from 0 to 4 [ 279.543273][T26836] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 279.556665][T26839] loop3: detected capacity change from 0 to 4 [ 279.565232][T26839] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80000, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/20, 0x14}, {&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000180)=""/73, 0x49}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/48, 0x30}], 0x7, 0x4, 0x200) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2805000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x40) r3 = timerfd_create(0x7, 0x100800) dup2(r3, r0) 02:47:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x10, 0x0, 0x0, 0x0, 0x0) 02:47:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 280.038251][T26891] loop3: detected capacity change from 0 to 4 [ 280.038886][T26889] loop4: detected capacity change from 0 to 4 [ 280.045295][T26890] loop0: detected capacity change from 0 to 4 [ 280.058174][T26889] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.067764][T26894] loop5: detected capacity change from 0 to 4 02:47:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x11, 0x0, 0x0, 0x0, 0x0) [ 280.080739][T26894] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.089809][T26891] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.104961][T26890] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x12, 0x0, 0x0, 0x0, 0x0) 02:47:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x13, 0x0, 0x0, 0x0, 0x0) [ 280.133418][T26894] loop5: detected capacity change from 0 to 4 [ 280.133486][T26891] loop3: detected capacity change from 0 to 4 [ 280.151911][T26894] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.163640][T26891] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.171880][T26889] loop4: detected capacity change from 0 to 4 [ 280.180817][T26890] loop0: detected capacity change from 0 to 4 02:47:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200d00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:25 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 280.223489][T26890] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.233417][T26889] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:25 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x14, 0x0, 0x0, 0x0, 0x0) [ 280.278925][T26949] loop3: detected capacity change from 0 to 4 [ 280.285426][T26953] loop5: detected capacity change from 0 to 4 [ 280.295203][T26953] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.314634][T26949] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.365260][T26953] loop5: detected capacity change from 0 to 4 [ 280.371960][T26953] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.372591][T26949] loop3: detected capacity change from 0 to 4 [ 280.413016][T26949] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="3792a2", 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:26 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x15, 0x0, 0x0, 0x0, 0x0) 02:47:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x16, 0x0, 0x0, 0x0, 0x0) [ 280.931351][T26992] loop3: detected capacity change from 0 to 4 [ 280.938111][T26991] loop5: detected capacity change from 0 to 4 [ 280.945344][T26992] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.956486][T26994] loop0: detected capacity change from 0 to 4 [ 280.957369][T26998] loop4: detected capacity change from 0 to 4 [ 280.969268][T26991] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.979869][T26998] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 280.996934][T26994] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x17, 0x0, 0x0, 0x0, 0x0) [ 281.025127][T26998] loop4: detected capacity change from 0 to 4 [ 281.032504][T26998] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x18, 0x0, 0x0, 0x0, 0x0) [ 281.079748][T26991] loop5: detected capacity change from 0 to 4 [ 281.097693][T26994] loop0: detected capacity change from 0 to 4 [ 281.099040][T26992] loop3: detected capacity change from 0 to 4 [ 281.119934][T26994] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:26 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x19, 0x0, 0x0, 0x0, 0x0) 02:47:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200f00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 281.135318][T26992] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.149082][T26991] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.159611][T27052] loop4: detected capacity change from 0 to 4 [ 281.237753][T27052] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.246713][T27064] loop3: detected capacity change from 0 to 4 [ 281.257680][T27064] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.306208][T27064] loop3: detected capacity change from 0 to 4 [ 281.307363][T27052] loop4: detected capacity change from 0 to 4 [ 281.319192][T27064] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.329460][T27052] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0xd9b83000) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) preadv(r2, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f0000001740)=""/191, 0xbf}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/169, 0xa9}], 0x9, 0xfffff9a4, 0x10001) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r2, 0xd43cb000) 02:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1a, 0x0, 0x0, 0x0, 0x0) 02:47:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 281.822253][T27098] loop3: detected capacity change from 0 to 4 [ 281.828459][T27099] loop5: detected capacity change from 0 to 4 [ 281.830967][T27103] loop0: detected capacity change from 0 to 4 [ 281.842753][T27105] loop4: detected capacity change from 0 to 4 [ 281.851104][T27099] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.862297][T27103] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1b, 0x0, 0x0, 0x0, 0x0) 02:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200600008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1c, 0x0, 0x0, 0x0, 0x0) [ 281.878617][T27098] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.883268][T27105] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.938758][T27103] loop0: detected capacity change from 0 to 4 [ 281.952880][T27105] loop4: detected capacity change from 0 to 4 [ 281.960446][T27105] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1d, 0x0, 0x0, 0x0, 0x0) [ 281.981590][T27103] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 281.990952][T27098] loop3: detected capacity change from 0 to 4 [ 282.006107][T27098] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 282.046279][T27145] loop5: detected capacity change from 0 to 4 [ 282.065814][T27145] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.113890][T27160] loop4: detected capacity change from 0 to 4 [ 282.123810][T27160] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.127132][T27165] loop0: detected capacity change from 0 to 4 [ 282.153572][T27165] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.170481][T27145] loop5: detected capacity change from 0 to 4 [ 282.177372][T27145] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.227539][T27165] loop0: detected capacity change from 0 to 4 [ 282.241917][T27165] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @ipv4={[], [], @multicast2}, 0x400}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) sendto$inet6(r3, &(0x7f0000000000)="0223ff2e5e4b46ec05fec3786c0973e96e5cfd2526f92cd6ae208bd0b79caad53a84316c69281cccc35dc04c9407434a8811cc13abbb3bddae6d78626ced210074c5b3d77b792cf1884babffa32244e4d33f87f35d6211dee0766a1a05b71ff8e0", 0x61, 0x1, 0x0, 0x0) 02:47:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201100008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x1e, 0x0, 0x0, 0x0, 0x0) 02:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200410008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200700008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20220d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 282.707692][T27202] loop4: detected capacity change from 0 to 4 [ 282.717649][T27202] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.727523][T27203] loop5: detected capacity change from 0 to 4 [ 282.729262][T27209] loop0: detected capacity change from 0 to 4 [ 282.740604][T27210] loop3: detected capacity change from 0 to 4 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x21, 0x0, 0x0, 0x0, 0x0) [ 282.753869][T27203] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.767369][T27210] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.777065][T27209] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.792561][T27202] loop4: detected capacity change from 0 to 4 02:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x22, 0x0, 0x0, 0x0, 0x0) [ 282.808813][T27202] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.828934][T27203] loop5: detected capacity change from 0 to 4 [ 282.838755][T27203] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.880677][T27210] loop3: detected capacity change from 0 to 4 [ 282.907566][T27209] loop0: detected capacity change from 0 to 4 [ 282.918191][T27209] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x23, 0x0, 0x0, 0x0, 0x0) [ 282.928368][T27252] loop4: detected capacity change from 0 to 4 [ 282.942774][T27210] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 282.952238][T27252] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 283.019252][T27264] loop5: detected capacity change from 0 to 4 [ 283.029489][T27252] loop4: detected capacity change from 0 to 4 [ 283.037696][T27252] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.072713][T27264] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.089841][T27282] loop3: detected capacity change from 0 to 4 [ 283.099962][T27282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.135245][T27264] loop5: detected capacity change from 0 to 4 [ 283.142065][T27282] loop3: detected capacity change from 0 to 4 [ 283.153854][T27282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.163834][T27264] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001480)=""/214, 0xd6}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/7, 0x7}], 0x4, 0xffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0xfcbd8000) 02:47:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x24, 0x0, 0x0, 0x0, 0x0) 02:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x25, 0x0, 0x0, 0x0, 0x0) [ 283.588547][T27316] loop3: detected capacity change from 0 to 4 [ 283.594913][T27312] loop4: detected capacity change from 0 to 4 [ 283.598426][T27321] loop5: detected capacity change from 0 to 4 [ 283.620320][T27321] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:28 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x26, 0x0, 0x0, 0x0, 0x0) [ 283.632496][T27316] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.650058][T27323] loop0: detected capacity change from 0 to 4 [ 283.657580][T27323] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.667169][T27312] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.692173][T27321] loop5: detected capacity change from 0 to 4 [ 283.698368][T27323] loop0: detected capacity change from 0 to 4 [ 283.698396][T27312] loop4: detected capacity change from 0 to 4 [ 283.709056][T27316] loop3: detected capacity change from 0 to 4 [ 283.720083][T27321] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.730238][T27323] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x27, 0x0, 0x0, 0x0, 0x0) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x28, 0x0, 0x0, 0x0, 0x0) 02:47:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x29, 0x0, 0x0, 0x0, 0x0) [ 283.739793][T27316] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.758522][T27312] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.834510][T27385] loop0: detected capacity change from 0 to 4 [ 283.841721][T27385] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 283.886591][T27385] loop0: detected capacity change from 0 to 4 [ 283.893414][T27385] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r1, &(0x7f0000000000)="a25480f283aec3bc543303666184ec9155ec13044a45f3418c377645bc899428c83bd544d6943a5e893033df5dac69f629c103f1f85a8af1ec17123d80803d2a86a13d30cd64027285e882f5db3080b0552aea2d51665a46235c4b55f04b2d5f30b1bbb21d59c25fed075b25215258a45f88", 0x72, 0x20000014, &(0x7f0000000080)={0xa, 0x4e23, 0x3f, @mcast2, 0x81}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') listen(r0, 0xec) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a, 0x0, 0x0, 0x0, 0x0) 02:47:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200410008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 284.523610][T27410] loop0: detected capacity change from 0 to 4 [ 284.534670][T27414] loop5: detected capacity change from 0 to 4 [ 284.541175][T27418] loop4: detected capacity change from 0 to 4 [ 284.542963][T27410] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.557969][T27414] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2b, 0x0, 0x0, 0x0, 0x0) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2c, 0x0, 0x0, 0x0, 0x0) [ 284.560273][T27425] loop3: detected capacity change from 0 to 4 [ 284.569033][T27418] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.589331][T27425] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:29 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 284.630135][T27425] loop3: detected capacity change from 0 to 4 [ 284.646953][T27425] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.660033][T27418] loop4: detected capacity change from 0 to 4 [ 284.667653][T27418] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:29 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2d, 0x0, 0x0, 0x0, 0x0) 02:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2e, 0x0, 0x0, 0x0, 0x0) [ 284.667872][T27455] loop0: detected capacity change from 0 to 4 [ 284.678483][T27414] loop5: detected capacity change from 0 to 4 [ 284.696789][T27455] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.713267][T27414] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.786762][T27455] loop0: detected capacity change from 0 to 4 [ 284.793917][T27455] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 284.808404][T27488] loop4: detected capacity change from 0 to 4 [ 284.819069][T27488] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000001380)=[{&(0x7f0000001480)=""/214, 0xd6}], 0x1, 0x5, 0x0) 02:47:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200b00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2f, 0x0, 0x0, 0x0, 0x0) 02:47:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x30, 0x0, 0x0, 0x0, 0x0) [ 285.383711][T27511] loop5: detected capacity change from 0 to 4 [ 285.391426][T27511] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.407097][T27510] loop3: detected capacity change from 0 to 4 [ 285.412690][T27517] loop4: detected capacity change from 0 to 4 [ 285.420143][T27521] loop0: detected capacity change from 0 to 4 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x31, 0x0, 0x0, 0x0, 0x0) 02:47:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 285.428480][T27517] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.440389][T27510] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.455367][T27521] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.465693][T27511] loop5: detected capacity change from 0 to 4 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x32, 0x0, 0x0, 0x0, 0x0) [ 285.493940][T27510] loop3: detected capacity change from 0 to 4 [ 285.501286][T27511] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.525493][T27510] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.535177][T27555] loop4: detected capacity change from 0 to 4 02:47:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:30 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x33, 0x0, 0x0, 0x0, 0x0) [ 285.558115][T27555] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.570731][T27521] loop0: detected capacity change from 0 to 4 [ 285.599111][T27521] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.653048][T27555] loop4: detected capacity change from 0 to 4 [ 285.656853][T27578] loop5: detected capacity change from 0 to 4 [ 285.666582][T27578] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.678585][T27555] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 285.725814][T27578] loop5: detected capacity change from 0 to 4 [ 285.741847][T27578] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x3, 0x20000006, @mcast2, 0x8}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x14, 0x0}}, 0x1c) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x6, 0x4) syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000140)=""/165, 0xa5}], 0x2, 0x9, 0x7ff) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @local, 0xffff}, 0x1c) 02:47:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x34, 0x0, 0x0, 0x0, 0x0) 02:47:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200d00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 286.258743][T27608] loop4: detected capacity change from 0 to 4 [ 286.266957][T27608] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.277415][T27610] loop3: detected capacity change from 0 to 4 [ 286.285954][T27616] loop0: detected capacity change from 0 to 4 [ 286.292633][T27617] loop5: detected capacity change from 0 to 4 [ 286.294303][T27616] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:31 executing program 1 (fault-call:4 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x35, 0x0, 0x0, 0x0, 0x0) [ 286.305045][T27610] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.321551][T27608] loop4: detected capacity change from 0 to 4 [ 286.331593][T27617] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.347621][T27633] FAULT_INJECTION: forcing a failure. [ 286.347621][T27633] name failslab, interval 1, probability 0, space 0, times 0 [ 286.361007][T27633] CPU: 1 PID: 27633 Comm: syz-executor.1 Not tainted 5.12.0-rc7-syzkaller #0 [ 286.369786][T27633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.379840][T27633] Call Trace: [ 286.383112][T27633] dump_stack+0x137/0x19d [ 286.385447][T27608] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.387441][T27633] should_fail+0x23c/0x250 [ 286.387458][T27633] __should_failslab+0x81/0x90 02:47:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x36, 0x0, 0x0, 0x0, 0x0) [ 286.387479][T27633] ? __se_sys_fsconfig+0x3a6/0x990 [ 286.412706][T27633] should_failslab+0x5/0x20 [ 286.417256][T27633] __kmalloc_track_caller+0x64/0x360 [ 286.422551][T27633] ? strnlen_user+0x137/0x1c0 [ 286.427249][T27633] strndup_user+0x73/0x120 [ 286.431742][T27633] __se_sys_fsconfig+0x3a6/0x990 [ 286.436683][T27633] __x64_sys_fsconfig+0x63/0x70 [ 286.442045][T27633] do_syscall_64+0x34/0x50 [ 286.446556][T27633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.452457][T27633] RIP: 0033:0x466459 02:47:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x37, 0x0, 0x0, 0x0, 0x0) 02:47:31 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x38, 0x0, 0x0, 0x0, 0x0) [ 286.456343][T27633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 286.475975][T27633] RSP: 002b:00007fad6b54a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 286.484753][T27633] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 286.492741][T27633] RDX: 00000000200002c0 RSI: 0000000000000005 RDI: 0000000000000004 [ 286.500714][T27633] RBP: 00007fad6b54a1d0 R08: 0000000000000000 R09: 0000000000000000 02:47:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:31 executing program 1 (fault-call:4 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 286.508762][T27633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.516728][T27633] R13: 00007ffd0b184b1f R14: 00007fad6b54a300 R15: 0000000000022000 [ 286.538572][T27616] loop0: detected capacity change from 0 to 4 [ 286.549554][T27617] loop5: detected capacity change from 0 to 4 [ 286.560258][T27616] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.574584][T27610] loop3: detected capacity change from 0 to 4 [ 286.577369][T27678] FAULT_INJECTION: forcing a failure. [ 286.577369][T27678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.582201][T27617] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.593774][T27678] CPU: 1 PID: 27678 Comm: syz-executor.1 Not tainted 5.12.0-rc7-syzkaller #0 [ 286.593797][T27678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.593807][T27678] Call Trace: [ 286.625184][T27678] dump_stack+0x137/0x19d [ 286.629568][T27678] should_fail+0x23c/0x250 [ 286.634055][T27678] should_fail_usercopy+0x16/0x20 [ 286.639060][T27678] _copy_from_user+0x1c/0xd0 [ 286.643636][T27678] strndup_user+0xb0/0x120 [ 286.648049][T27678] __se_sys_fsconfig+0x3a6/0x990 [ 286.652975][T27678] __x64_sys_fsconfig+0x63/0x70 [ 286.657810][T27678] do_syscall_64+0x34/0x50 [ 286.662218][T27678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.668197][T27678] RIP: 0033:0x466459 [ 286.672199][T27678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 286.691893][T27678] RSP: 002b:00007fad6b54a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 286.700295][T27678] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 286.708334][T27678] RDX: 00000000200002c0 RSI: 0000000000000005 RDI: 0000000000000004 [ 286.716372][T27678] RBP: 00007fad6b54a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 286.724335][T27678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.732286][T27678] R13: 00007ffd0b184b1f R14: 00007fad6b54a300 R15: 0000000000022000 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x39, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 1 (fault-call:4 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3a, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 286.763926][T27610] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.774728][T27681] loop4: detected capacity change from 0 to 4 [ 286.782808][T27681] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 286.833418][T27694] FAULT_INJECTION: forcing a failure. [ 286.833418][T27694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.846486][T27694] CPU: 0 PID: 27694 Comm: syz-executor.1 Not tainted 5.12.0-rc7-syzkaller #0 [ 286.855280][T27694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.865492][T27694] Call Trace: [ 286.868801][T27694] dump_stack+0x137/0x19d [ 286.873190][T27694] should_fail+0x23c/0x250 [ 286.877654][T27694] should_fail_usercopy+0x16/0x20 [ 286.882785][T27694] _copy_to_user+0x1c/0x90 [ 286.887224][T27694] simple_read_from_buffer+0xab/0x120 [ 286.892585][T27694] proc_fail_nth_read+0xf6/0x140 [ 286.897509][T27694] ? rw_verify_area+0x136/0x250 [ 286.902367][T27694] ? proc_fault_inject_write+0x200/0x200 [ 286.907991][T27694] vfs_read+0x154/0x5d0 [ 286.912208][T27694] ? kfree+0xf0/0x1d0 [ 286.916175][T27694] ? __fget_light+0x21b/0x260 [ 286.920833][T27694] ? __cond_resched+0x11/0x40 [ 286.925499][T27694] ksys_read+0xce/0x180 [ 286.929635][T27694] __x64_sys_read+0x3e/0x50 [ 286.934115][T27694] do_syscall_64+0x34/0x50 [ 286.938557][T27694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 286.944430][T27694] RIP: 0033:0x4191dc [ 286.948310][T27694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 286.968062][T27694] RSP: 002b:00007fad6b54a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.976485][T27694] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004191dc [ 286.984509][T27694] RDX: 000000000000000f RSI: 00007fad6b54a1e0 RDI: 0000000000000005 [ 286.992481][T27694] RBP: 00007fad6b54a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 287.000591][T27694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.008618][T27694] R13: 00007ffd0b184b1f R14: 00007fad6b54a300 R15: 0000000000022000 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3b, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x2, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 287.029762][T27681] loop4: detected capacity change from 0 to 4 [ 287.036617][T27681] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x3, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20003f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 287.082943][T27701] loop0: detected capacity change from 0 to 4 [ 287.118109][T27701] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3c, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x4, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 287.136721][T27718] loop3: detected capacity change from 0 to 4 [ 287.158538][T27718] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.171983][T27741] loop4: detected capacity change from 0 to 4 [ 287.179403][T27743] loop5: detected capacity change from 0 to 4 [ 287.192236][T27701] loop0: detected capacity change from 0 to 4 [ 287.199573][T27741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.216656][T27718] loop3: detected capacity change from 0 to 4 [ 287.230221][T27701] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.239799][T27718] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.252182][T27743] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3d, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 287.286758][T27741] loop4: detected capacity change from 0 to 4 [ 287.313602][T27741] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.330962][T27743] loop5: detected capacity change from 0 to 4 [ 287.339099][T27743] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.360936][T27782] loop3: detected capacity change from 0 to 4 [ 287.369825][T27784] loop0: detected capacity change from 0 to 4 [ 287.376406][T27782] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200f00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x7, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200040008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x3e, 0x0, 0x0, 0x0, 0x0) [ 287.386010][T27784] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.429292][T27803] loop4: detected capacity change from 0 to 4 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x200002c5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 287.440408][T27803] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.451175][T27808] loop5: detected capacity change from 0 to 4 [ 287.453856][T27784] loop0: detected capacity change from 0 to 4 [ 287.469410][T27808] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.472246][T27784] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x41, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x2, 0x0) [ 287.491498][T27782] loop3: detected capacity change from 0 to 4 [ 287.501227][T27803] loop4: detected capacity change from 0 to 4 [ 287.507844][T27803] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206300008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 287.539078][T27782] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.573984][T27808] loop5: detected capacity change from 0 to 4 [ 287.582693][T27843] loop0: detected capacity change from 0 to 4 [ 287.607272][T27808] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.635419][T27860] loop3: detected capacity change from 0 to 4 [ 287.638801][T27843] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:32 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x42, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x3, 0x0) [ 287.652054][T27860] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.670012][T27857] loop4: detected capacity change from 0 to 4 02:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x43, 0x0, 0x0, 0x0, 0x0) [ 287.732763][T27843] loop0: detected capacity change from 0 to 4 [ 287.740859][T27860] loop3: detected capacity change from 0 to 4 [ 287.753801][T27843] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.763381][T27857] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x4, 0x0) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x44, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200d22008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 287.778466][T27860] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x45, 0x0, 0x0, 0x0, 0x0) [ 287.845295][T27857] loop4: detected capacity change from 0 to 4 [ 287.853869][T27899] loop5: detected capacity change from 0 to 4 [ 287.853854][T27857] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x300, 0x0) [ 287.905170][T27914] loop3: detected capacity change from 0 to 4 [ 287.913492][T27914] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.928393][T27917] loop0: detected capacity change from 0 to 4 [ 287.935135][T27899] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x30000, 0x0) 02:47:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206900008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 287.951791][T27917] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 287.965568][T27914] loop3: detected capacity change from 0 to 4 [ 287.966087][T27899] loop5: detected capacity change from 0 to 4 [ 287.977953][T27914] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x46, 0x0, 0x0, 0x0, 0x0) [ 288.008108][T27937] loop4: detected capacity change from 0 to 4 [ 288.014142][T27917] loop0: detected capacity change from 0 to 4 [ 288.025189][T27899] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.034804][T27937] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.058305][T27917] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201100008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x1000000, 0x0) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x47, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 288.106586][T27937] loop4: detected capacity change from 0 to 4 [ 288.126658][T27955] loop3: detected capacity change from 0 to 4 [ 288.147176][T27937] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x48, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x2000000, 0x0) [ 288.157931][T27955] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.174775][T27975] loop5: detected capacity change from 0 to 4 [ 288.193815][T27975] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.201680][T27978] loop0: detected capacity change from 0 to 4 02:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x4000000, 0x0) 02:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200068008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 288.228792][T27955] loop3: detected capacity change from 0 to 4 [ 288.241000][T27978] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.243831][T27998] loop4: detected capacity change from 0 to 4 [ 288.259699][T27998] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x49, 0x0, 0x0, 0x0, 0x0) [ 288.271663][T27955] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.286110][T27975] loop5: detected capacity change from 0 to 4 [ 288.297923][T27975] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x1000000000000, 0x0) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4a, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 288.343046][T27978] loop0: detected capacity change from 0 to 4 [ 288.364095][T27978] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.370433][T28026] loop3: detected capacity change from 0 to 4 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x3000000000000, 0x0) 02:47:33 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4b, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200069008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 288.388453][T28032] loop4: detected capacity change from 0 to 4 [ 288.396956][T28032] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.418988][T28038] loop5: detected capacity change from 0 to 4 [ 288.425420][T28026] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x100000000000000, 0x0) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4c, 0x0, 0x0, 0x0, 0x0) [ 288.471625][T28038] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.495444][T28055] loop0: detected capacity change from 0 to 4 [ 288.495694][T28060] loop4: detected capacity change from 0 to 4 [ 288.530794][T28038] loop5: detected capacity change from 0 to 4 [ 288.543477][T28026] loop3: detected capacity change from 0 to 4 [ 288.544234][T28055] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.559683][T28060] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x200000000000000, 0x0) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4d, 0x0, 0x0, 0x0, 0x0) [ 288.576733][T28038] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.586179][T28026] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.614121][T28060] loop4: detected capacity change from 0 to 4 [ 288.623623][T28055] loop0: detected capacity change from 0 to 4 02:47:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x400000000000000, 0x0) 02:47:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202200008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 288.648797][T28060] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.662851][T28055] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.686577][T28101] loop5: detected capacity change from 0 to 4 02:47:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x2) 02:47:33 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4e, 0x0, 0x0, 0x0, 0x0) [ 288.703059][T28101] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20003f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20006c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202500008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x4f, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x3) [ 288.794227][T28130] loop0: detected capacity change from 0 to 4 [ 288.801207][T28128] loop4: detected capacity change from 0 to 4 [ 288.813346][T28124] loop3: detected capacity change from 0 to 4 [ 288.822507][T28128] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x50, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x4) [ 288.847505][T28130] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.849475][T28141] loop5: detected capacity change from 0 to 4 [ 288.864934][T28124] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.884925][T28141] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.900656][T28128] loop4: detected capacity change from 0 to 4 [ 288.932033][T28124] loop3: detected capacity change from 0 to 4 [ 288.949627][T28128] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.961421][T28130] loop0: detected capacity change from 0 to 4 [ 288.967663][T28141] loop5: detected capacity change from 0 to 4 [ 288.968692][T28124] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.983588][T28141] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 288.996288][T28130] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x51, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x300) 02:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200074008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200040008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 289.097764][T28193] loop4: detected capacity change from 0 to 4 [ 289.105671][T28196] loop5: detected capacity change from 0 to 4 [ 289.105802][T28195] loop3: detected capacity change from 0 to 4 [ 289.112199][T28200] loop0: detected capacity change from 0 to 4 [ 289.128065][T28195] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x30000) [ 289.141057][T28196] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.157780][T28200] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.168158][T28193] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x1000000) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x52, 0x0, 0x0, 0x0, 0x0) [ 289.197937][T28200] loop0: detected capacity change from 0 to 4 [ 289.216708][T28200] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.216895][T28195] loop3: detected capacity change from 0 to 4 [ 289.235443][T28196] loop5: detected capacity change from 0 to 4 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x2000000) 02:47:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x53, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fe00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200078008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 289.244711][T28196] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.247026][T28193] loop4: detected capacity change from 0 to 4 [ 289.260655][T28193] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.270722][T28195] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x4000000) [ 289.372333][T28254] loop0: detected capacity change from 0 to 4 [ 289.382279][T28254] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.382300][T28259] loop3: detected capacity change from 0 to 4 [ 289.397836][T28253] loop4: detected capacity change from 0 to 4 [ 289.404076][T28259] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x55, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x1000000000000) [ 289.418891][T28263] loop5: detected capacity change from 0 to 4 [ 289.434888][T28253] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.455596][T28263] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.466375][T28254] loop0: detected capacity change from 0 to 4 [ 289.474663][T28259] loop3: detected capacity change from 0 to 4 [ 289.485533][T28254] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.500168][T28253] loop4: detected capacity change from 0 to 4 [ 289.506476][T28259] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x3000000000000) 02:47:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 289.528209][T28253] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.528394][T28263] loop5: detected capacity change from 0 to 4 02:47:34 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x56, 0x0, 0x0, 0x0, 0x0) 02:47:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200402008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x100000000000000) [ 289.577858][T28263] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="204c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 289.643537][T28312] loop0: detected capacity change from 0 to 4 [ 289.667621][T28312] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x57, 0x0, 0x0, 0x0, 0x0) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x200000000000000) [ 289.690167][T28328] loop3: detected capacity change from 0 to 4 [ 289.701977][T28332] loop4: detected capacity change from 0 to 4 [ 289.717207][T28332] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.718667][T28335] loop5: detected capacity change from 0 to 4 [ 289.735674][T28328] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.786012][T28335] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.787094][T28332] loop4: detected capacity change from 0 to 4 [ 289.801517][T28312] loop0: detected capacity change from 0 to 4 [ 289.821935][T28312] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x400000000000000) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x58, 0x0, 0x0, 0x0, 0x0) [ 289.834638][T28332] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 289.850048][T28328] loop3: detected capacity change from 0 to 4 [ 289.856299][T28335] loop5: detected capacity change from 0 to 4 [ 289.873948][T28335] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fffe008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x59, 0x0, 0x0, 0x0, 0x0) [ 289.887453][T28328] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x202, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0x4040000f04a02) mmap(&(0x7f000029b000/0x3000)=nil, 0x3000, 0x1800003, 0x13, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 289.985468][T28388] loop5: detected capacity change from 0 to 4 [ 289.992929][T28393] loop4: detected capacity change from 0 to 4 [ 289.999797][T28388] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.010242][T28403] loop3: detected capacity change from 0 to 4 [ 290.019079][T28394] loop0: detected capacity change from 0 to 4 02:47:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="208403008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000200), 0x0, 0xda0, 0x0) r1 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0) mmap(&(0x7f0000740000/0x2000)=nil, 0x2000, 0x3000000, 0x810, r0, 0xf731e000) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 290.026588][T28403] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.044467][T28393] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.064006][T28388] loop5: detected capacity change from 0 to 4 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5a, 0x0, 0x0, 0x0, 0x0) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000000), 0x10000000000000dc, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 290.087259][T28394] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.100667][T28388] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.116045][T28417] loop3: detected capacity change from 0 to 4 [ 290.124933][T28417] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206800008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5b, 0x0, 0x0, 0x0, 0x0) [ 290.169673][T28417] loop3: detected capacity change from 0 to 4 [ 290.189248][T28417] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.193959][T28393] loop4: detected capacity change from 0 to 4 [ 290.200251][T28394] loop0: detected capacity change from 0 to 4 [ 290.214454][T28393] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.226817][T28394] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200fff008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200062008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x404240, 0xa0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5c, 0x0, 0x0, 0x0, 0x0) 02:47:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="208603008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 290.274618][T28454] loop5: detected capacity change from 0 to 4 [ 290.289514][T28454] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) write$binfmt_elf32(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xc9, 0xff, 0x2, 0x7, 0x3, 0x3, 0x7, 0x9c, 0x38, 0x3d7, 0x423, 0xf801, 0x20, 0x2, 0x3, 0x4, 0x101}, [{0x5, 0x5, 0xc11c, 0x8, 0xff, 0x734, 0x7, 0x4}, {0x6474e551, 0x3, 0x1f, 0x6, 0xfffffff9, 0x8, 0x62e, 0xffffffff}], "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", [[], [], [], []]}, 0x1478) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = fork() tkill(r3, 0x31) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x3f, 0x48, 0x1, 0xff, 0x0, 0x1ff, 0x100, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x100, 0xff, 0x2, 0x9, 0xfffffffffffffe00, 0x62, 0x7}, r3, 0xd, r1, 0x8) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5d, 0x0, 0x0, 0x0, 0x0) [ 290.348835][T28454] loop5: detected capacity change from 0 to 4 [ 290.355183][T28483] loop4: detected capacity change from 0 to 4 [ 290.361603][T28476] loop0: detected capacity change from 0 to 4 [ 290.373753][T28454] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.383875][T28481] loop3: detected capacity change from 0 to 4 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f0000000040)='async\x00', 0x0, 0x0) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5e, 0x0, 0x0, 0x0, 0x0) 02:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="206c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 290.392610][T28481] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.403026][T28476] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.421237][T28483] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.437544][T28481] loop3: detected capacity change from 0 to 4 02:47:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200063008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x40010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{0x0, 0x400, 0x0, 0x0, 0x3, 0x7c, 0x0, 0x800, 0x7, 0x7, 0x3, 0x1, 0x401, 0x8ca, 0x100000001}}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) [ 290.465112][T28476] loop0: detected capacity change from 0 to 4 [ 290.471937][T28476] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.485864][T28483] loop4: detected capacity change from 0 to 4 [ 290.492452][T28481] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.530075][T28483] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.545396][T28521] loop5: detected capacity change from 0 to 4 [ 290.554405][T28521] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.573831][T28539] loop0: detected capacity change from 0 to 4 02:47:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20feff008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a103008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x5f, 0x0, 0x0, 0x0, 0x0) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000040)=0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x40, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x80082407, 0xf04a00) r6 = creat(&(0x7f0000001380)='./file0\x00', 0x107) r7 = accept$packet(r0, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001440)=0x14) io_submit(r2, 0x4, &(0x7f00000015c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x7, r3, &(0x7f0000000080)="263cb924e721d75826cd26fed5891e6d8a5e264bbf2bcd798f3bca2095d12fa2f2639230bdb65fce40ecb5fa9f17b9b7e1e474a90667b8f508d4784c38eeed84d21c02a8df8396c5b5454f1341148e2557ea61d18f092f1d2759738ca427d21fd2b6ddeb5b02bf595b9b71455d3b63f0f04abff5fc6c3dc21cbb05efc8117d9e1523b75b6445878eab01a15827f5bb98117db3f523dc0405d4f84aeb1f4229a26a51fffd19107c28a392fc82f20187ea0c821a61ce7d7f60442445310cd743dac628fdbadc3cd26ac141dbcb9297a9a8deedf47bf2502ea79e491c36", 0xdc, 0xe5, 0x0, 0x3, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0xaf76, r0, &(0x7f0000000200)="446a41708dcaf741a1af09718b7b8462a1d7c481962a7c432b64f544676d5123bf9bcfd627d0e9c629091371e1fde6cce04bd0ebb0881cda1b41695c6dffa53917224cd2282dd0063b5e022b1f04d77a50efc073b82173c5879760b04f072b69a64116879388dcd2a90af8c6962b95790063d785e34b669b31f3889cda8d19ad4c9e3a5b4275969f873de97c348092a5d49102d3ac3ea726fb11b4485f277a6935e4", 0xa2, 0x7, 0x0, 0x2, r4}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x8, 0x401, r5, &(0x7f0000000380)="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", 0x1000, 0x3f, 0x0, 0x3, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x5, 0x800, r7, &(0x7f0000001480)="007bdc2b6feee6b45a2c5ac20c03a0efacb10cf03d584e041ae4c6b14442119e7250a93aab88084a13cf1a5e825f2d801a1750b4688e8b35552ce502b42caa0019b1c9886e98ac233bde85944d24d85ee70e70af0f26d94226b11b5cf1031c0b5e5e4e9d3f577cb89df4fa7a31bc4dff10c34abeb137cc0ca6935bfccf9ee791ac0bbc2b016645230d8b9c06617f8e39f9d380ffb3606a598dcffaaabe7f59fdd9458f19467383a8c7d4c7282c814c3f5f6d3b3274fab331778f2a8d58b60b789efdba0d7529070c05404354917242843e87187aa85900ef6486", 0xda, 0x9, 0x0, 0x0, r0}]) 02:47:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup(r0) r1 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x4) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 290.605371][T28539] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.607625][T28521] loop5: detected capacity change from 0 to 4 [ 290.621574][T28521] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207400008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x60, 0x0, 0x0, 0x0, 0x0) [ 290.669216][T28553] loop3: detected capacity change from 0 to 4 [ 290.687542][T28539] loop0: detected capacity change from 0 to 4 [ 290.702610][T28553] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x61, 0x0, 0x0, 0x0, 0x0) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd_index=0x6, 0x89, &(0x7f0000000100)=[{&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/71, 0x47}, {&(0x7f00000001c0)=""/254, 0xfe}], 0x4, 0x1, 0x1}, 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x62, 0x0, 0x0, 0x0, 0x0) [ 290.744548][T28539] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.746262][T28579] loop4: detected capacity change from 0 to 4 [ 290.775181][T28579] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.784596][T28581] loop5: detected capacity change from 0 to 4 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) mmap(&(0x7f0000182000/0x12000)=nil, 0x12000, 0x86b84cc4109090d9, 0x10, r2, 0x10001000) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200068008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 290.841432][T28581] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.848097][T28553] loop3: detected capacity change from 0 to 4 [ 290.862260][T28579] loop4: detected capacity change from 0 to 4 [ 290.874235][T28579] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2005f5e0ff00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 290.874375][T28553] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.903686][T28581] loop5: detected capacity change from 0 to 4 [ 290.919524][T28581] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000200)) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) r4 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a203008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x63, 0x0, 0x0, 0x0, 0x0) 02:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207a00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 290.946090][T28621] loop0: detected capacity change from 0 to 4 [ 290.963983][T28621] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 290.968909][T28626] loop4: detected capacity change from 0 to 4 [ 290.984281][T28626] EXT4-fs (loop4): bad geometry: block count 255 exceeds size of device (1 blocks) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) mmap(&(0x7f00002cf000/0x2000)=nil, 0x2000, 0x3800002, 0x80010, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x181100, 0x0) openat(r3, &(0x7f0000000100)='./file0\x00', 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc002, 0x102) r4 = dup3(r2, r1, 0x0) fcntl$getown(r4, 0x9) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x64, 0x0, 0x0, 0x0, 0x0) [ 291.027162][T28637] loop5: detected capacity change from 0 to 4 [ 291.044070][T28626] loop4: detected capacity change from 0 to 4 [ 291.056543][T28637] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0xc42, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0x6, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000ff784f765f3a02eea099f703200026bd7000fe20002507000000070000002e2f3000"/50], 0x28}, 0x1, 0x0, 0x0, 0x22044000}, 0x20004000) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x65, 0x0, 0x0, 0x0, 0x0) [ 291.070154][T28626] EXT4-fs (loop4): bad geometry: block count 255 exceeds size of device (1 blocks) [ 291.094189][T28621] loop0: detected capacity change from 0 to 4 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x812, r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x1451314997c5e775) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x22b8, 0xfffffffa, 0x9c, 0x5, 0x3}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x0) signalfd(r1, &(0x7f00000000c0)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200002008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 291.147786][T28621] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.178529][T28658] loop3: detected capacity change from 0 to 4 [ 291.184953][T28637] loop5: detected capacity change from 0 to 4 02:47:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20006c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x66, 0x0, 0x0, 0x0, 0x0) [ 291.197340][T28637] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.208577][T28677] loop4: detected capacity change from 0 to 4 [ 291.215955][T28658] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.238248][T28677] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207c00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 291.315753][T28658] loop3: detected capacity change from 0 to 4 [ 291.325710][T28658] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.327783][T28704] loop5: detected capacity change from 0 to 4 [ 291.336833][T28707] loop0: detected capacity change from 0 to 4 [ 291.355013][T28707] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a303008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x4100, 0x2a) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x9, 0x3f, 0x6, 0x0, 0x0, 0xd9c, 0x4120, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x18004, 0x4, 0x1, 0x5, 0x400, 0x7f, 0x101}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="5e7fb459", 0x4}, {&(0x7f0000000340)="3f6969b80f11fcde89fafd485572ad7aad076ad0641cfb16b6a06af495633bc2dda828df467e7b2afccca495080140912b1537d893a3369e1b515923371c0c6e97ef129faba23e6eef1a944b8fda77c84d696034e5fa98de4e6fb54e9e382e9672219d85b4dfeb39dbf16f67c9a5d3c5166ba8bf6c37978ac3ca02f4e2b28204a1c7e44e5b605caedd53cd98d73619b89d8895b1bb0240ee688aaf387217e2496c09de", 0xa3}, {&(0x7f0000000400)="6cd1613ef571da668e10a0b573b662ba226ce6b17cc4142e58fc54fa2abe6976e68c5168b52401ed8ca333e5e2320c9d834d307a32a439c0e194eba8853f23d68ec631d870eac867c62590de3903d060b0f5056fd15df921536a953f8aaa45738e89952071e362c366cdd56b71df2ba34b95e64640f4e0104b7bc2afd5f65ee88d0bb793c2ba3f", 0x87}, {&(0x7f00000004c0)="0c66a8800fd2", 0x6}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e6273533552b2116f10600000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x8000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002c40)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000013c0)=[{&(0x7f00000001c0)="be29db7d76ff80dab47189a992bf96b5d8aafa7e02eff93903955e6e8179134bbd0e1c0f83c35f76435701d2cca181", 0x2f}, {&(0x7f0000000200)="5fae6bb38ae3297437500dbf86e625115d82684393d68a86d728e89ec627bdbf13933e1513e35aba70e7a18a1278f39072c9f1c795e0597ebd2087fa539a9cee11d85c87cc43826806e1299d0f6735303c8b52e8ef449dfe797198a8d109ad7adeea00ef3eee04cc7ce9ae02c5f9309c9ffdf68b96be4f9e0c08db05d6233ede8ca089a4aa8cff", 0x87}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="c4a0144cc6ee36a6c9791afa59433d9431a58a2513bf11c2ac93ca899fcff4eee99aca77b8f7260eed5f6ae41cf3351a222855da7dd76b2c159c5ab8c5596a8bdde077238fc068509d2672a695bb1207f72bf5aa2ca88f857725ed84887083d5e77d790cdac930d9cfc0207d4c188ad4a0e7ae6bdf0e78b9060518628ba71eb992dd626f5c932a9134028693bcbdee5af0d717d5c98b58f3d8f6f513f3", 0x9d}], 0x4, &(0x7f0000001400)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x48, 0x40010}, {&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001500)="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", 0x1000}], 0x1, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r5}}}], 0x88}], 0x2, 0x48044) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x67, 0x0, 0x0, 0x0, 0x0) [ 291.364692][T28704] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x68, 0x0, 0x0, 0x0, 0x0) 02:47:36 executing program 1: r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x110, 0x4}, 0x18) r1 = openat(r0, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0xa) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x9, 0x3f, 0x6, 0x0, 0x0, 0xd9c, 0x4120, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x18004, 0x4, 0x1, 0x5, 0x400, 0x7f, 0x101}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="5e7fb459", 0x4}, {&(0x7f0000000340)="3f6969b80f11fcde89fafd485572ad7aad076ad0641cfb16b6a06af495633bc2dda828df467e7b2afccca495080140912b1537d893a3369e1b515923371c0c6e97ef129faba23e6eef1a944b8fda77c84d696034e5fa98de4e6fb54e9e382e9672219d85b4dfeb39dbf16f67c9a5d3c5166ba8bf6c37978ac3ca02f4e2b28204a1c7e44e5b605caedd53cd98d73619b89d8895b1bb0240ee688aaf387217e2496c09de", 0xa3}, {&(0x7f0000000400)="6cd1613ef571da668e10a0b573b662ba226ce6b17cc4142e58fc54fa2abe6976e68c5168b52401ed8ca333e5e2320c9d834d307a32a439c0e194eba8853f23d68ec631d870eac867c62590de3903d060b0f5056fd15df921536a953f8aaa45738e89952071e362c366cdd56b71df2ba34b95e64640f4e0104b7bc2afd5f65ee88d0bb793c2ba3f", 0x87}, {&(0x7f00000004c0)="0c66a8800fd2", 0x6}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00001c000000000500000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000e427fdf57783ffe10e36a1b4760cece3026bcc8ce232cf1e913b31b99d99ff964b125e57f822f9186ded6671e903422dd1e281b4f0c712abef5dde28e8ce614b6694fa51ead3ddb7da005d1dfe57491f06cb78be55dd1420ff7014553e5c1c5a204984a64e3188ecfce870134a22ac4c2c8fdd55cdc85c418f7425a6ef5ffb914c74a99d", @ANYRES32, @ANYBLOB="000000e6273533552b2116f10600000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c96d0e1599f2d3af500000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="2000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x8000}, 0x8000) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 291.417888][T28719] loop4: detected capacity change from 0 to 4 [ 291.428189][T28719] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.428270][T28724] loop3: detected capacity change from 0 to 4 [ 291.464657][T28704] loop5: detected capacity change from 0 to 4 [ 291.471865][T28707] loop0: detected capacity change from 0 to 4 [ 291.492933][T28707] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.503897][T28724] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207d00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000002580)=[{&(0x7f0000000040)=""/4, 0x4}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f00000001c0)=""/244, 0xf4}, {&(0x7f0000001300)=""/199, 0xc7}, {&(0x7f0000001400)=""/254, 0xfe}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000001500)=""/105, 0x69}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x9, 0x1000040, 0xfffffffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x8100, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002800)={0x0, "197693665e01155cd8fd45ef776c823a"}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000003800)={r2, 0x4, 0x1, [0x3, 0x5, 0x1, 0x19ad0fef, 0xffffffffffffffe0], [0x3, 0x6, 0x6, 0xfff, 0x8, 0xffffffffffffff3c, 0x10000, 0xbb9, 0x9, 0x8001, 0x9, 0xa5, 0x4, 0xfffffffffffffe00, 0xcb, 0x4, 0x0, 0x8, 0x0, 0x6, 0x80000000, 0x7, 0xfff, 0x200, 0x8, 0x5, 0x8, 0x6, 0x6, 0x1, 0x4, 0x6, 0x1000, 0x80, 0x5, 0xb7, 0xe20, 0x2, 0x2, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x81, 0x1, 0x9, 0x1, 0x7fff, 0x5, 0x8, 0x6, 0x100000000, 0xf44, 0x1, 0x2, 0x80, 0x8, 0x1, 0x7, 0x9, 0x4d, 0x7, 0x0, 0x0, 0x80000001, 0x8, 0x2, 0x10000, 0x2, 0x4, 0x3ef, 0x2f7, 0x3ff, 0xfff, 0x3, 0x800, 0xb82, 0x9a, 0x1, 0x5e61, 0x61e, 0x3, 0x9b, 0xffff, 0x8, 0xfffffffffffffff7, 0x0, 0x100000000, 0x100, 0x4, 0xfff, 0x10000, 0x9, 0x5, 0x100000001, 0x3, 0x80, 0x101, 0x4, 0x1, 0x3, 0x0, 0x401, 0x9, 0x8001, 0x4, 0x7, 0x100000000, 0x0, 0x101, 0x4, 0x6, 0x7, 0x2, 0x7, 0x0, 0x0, 0x7, 0x8e, 0x10001]}) sendto$inet(r0, &(0x7f0000003cc0)="5c8d26e1928996382194fb099c34f2c807cfa94f0dec706223604a1f2c1983c4e4c3aa91dc4e88622ac902e01b2ba555a0120261f1d24d31537ba25e93b7c67b8e5abe8000"/81, 0x51, 0x20000081, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) fchdir(r3) write$sndseq(r1, &(0x7f0000002640)=[{0x11, 0x1, 0x9f, 0x20, @time={0x5, 0x8}, {0x0, 0x1}, {0x6, 0x7f}, @raw32={[0x5, 0x1, 0x80]}}, {0x5, 0x8d, 0xff, 0x2, @time={0x9, 0x200059}, {0x1f, 0xbc}, {0x80, 0x44}, @ext={0x75, &(0x7f0000002780)="ebb47d5e84e9109e572f323f9d2846ee996be00a64e5a06dd8e0f6e03ae25bbd3339517da5ff231c8f9d1aa168e85192a34059945f48547fde67efa16c65f16e5009f4a56fa76629d593ab088bd32b7d36cbbcdc2fd5d776810f0178f77178340059f29415e7c10c44be0141a8eea5663bc74950fb"}}, {0x79, 0x80, 0x4, 0x9, @time={0x80, 0xffff}, {0x58, 0x6}, {0x7a, 0x8}, @addr={0x20, 0x80}}], 0x54) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000026c0)={0x10001, 0x7, 0x0, 'queue1\x00'}) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000003c40)={0x97, 0xb3, 0x3, 0x6, 0x7}) [ 291.504196][T28704] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.519282][T28719] loop4: detected capacity change from 0 to 4 [ 291.545574][T28719] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.555724][T28724] loop3: detected capacity change from 0 to 4 02:47:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200074008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) fsopen(&(0x7f0000000040)='logfs\x00', 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x4000, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) read(r2, &(0x7f00000001c0)=""/74, 0x4a) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 02:47:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x69, 0x0, 0x0, 0x0, 0x0) 02:47:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a403008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 291.563345][T28724] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.582093][T28756] loop5: detected capacity change from 0 to 4 [ 291.600537][T28756] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.659650][T28778] loop0: detected capacity change from 0 to 4 [ 291.668586][T28778] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.684755][T28784] loop3: detected capacity change from 0 to 4 [ 291.687187][T28785] loop4: detected capacity change from 0 to 4 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6a, 0x0, 0x0, 0x0, 0x0) [ 291.713735][T28785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.731421][T28778] loop0: detected capacity change from 0 to 4 [ 291.739562][T28784] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.749387][T28756] loop5: detected capacity change from 0 to 4 02:47:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x100010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\\@\x00', &(0x7f0000000080)='\x00', 0x0) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6b, 0x0, 0x0, 0x0, 0x0) [ 291.749479][T28778] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.765704][T28756] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.780666][T28785] loop4: detected capacity change from 0 to 4 02:47:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207e00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r0, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000003c0)={r0, 0x3, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ipvlan1\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @remote}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x80, 0x8, 0xe, @private0, @dev={0xfe, 0x80, [], 0x1e}, 0x80, 0x7, 0x653c, 0x8001}}) accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14, 0x80800) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000400)={r7, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f00000003c0)={r7, 0x3, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1dc, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800003, 0x810, r8, 0x4000) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r9, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 291.816678][T28785] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.834475][T28784] loop3: detected capacity change from 0 to 4 [ 291.851866][T28784] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6c, 0x0, 0x0, 0x0, 0x0) 02:47:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a503008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 291.906364][T28831] loop0: detected capacity change from 0 to 4 [ 291.938959][T28832] loop5: detected capacity change from 0 to 4 02:47:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f00000001c0)='./file0\x00', 0xc0, 0x3, &(0x7f0000001380)=[{&(0x7f0000000300)="17b9fd5dc703974589784425b692494a9a62ee9ce5b80fa42420b889d017c22d1d9e95a78853c11760f15b42d0f828ec6eca404bca7a9c473321d749838fb183e1f5491edf785bc6ccb04da7e0d3f93bcf75cc644e9147c223ec70634e6074dedb299af91e664cda5afc3039f91d735c5a2d4e6351b18fd84266bac670bbb400458b16c1a50cec08c0d6fe6fe196d18a57f1923adc1be698d231aa93ae9ab6e55235597b4951b0e9ca42b19e2f21ed4faf8e18d6309e06c3b79f15b091784ba375ce3e5f463c1f761588797944282164ef65af6a2bd9ba7ff1333f6ace18e05ae6b11006b199837fd34b9467ba40d240299e64b23717182ee601f46b4d5996bc1162fc410ae983ecb70434060492673b09be5b93e0e4cfba68bfe3e1a2dcbd44878b059f7f8674bccda7bb1ddc4be39d5dd657ea3fb3d20e36f7d65aa54c6e6fae292afc7c6e8568b69e271e0baa911258244f945451c4224ac660f1918f43b5676db14cc81b16b9de08dc0bb97556e2f87d46f11f350e117c48238395ca7c0898b0be297a0dbaaf7193bcafb2b44409bcd668ceb66eba2b3ef9520a87462bf483b68f99846e441a6b0a6598e5c2e48f23979386d0053d65a8ae49ec8306d7b54a336e467fef657058fd192e568409411605975a49f73ef2f8c2b75d82e03c24a6a6ebc00a7497331b6788ca6b821ff989a2a510c29cc59f0115e06a99f10f30150f6c4ef97223a823848f85b3237c81e46204f1eee0db9e9d6c3aafc363ca5b827ab566a73073b2c41635aa9077a4f2e7a7d3c2b137f700f7b9f80d6d66266186020ae35e2354c150d491308f69f253a62094c3e28690cb2eeb6781dc9e03a9cc55811697ec974d9b8feb1683dad9de1756099604d7c03ada9792ac237ba274818e25ce44e04d6e02d88af47cbdb6ead2d9fb88a31754edd049dc3f3f633726ff06f44846123586db8ca033dd8082fa69501ade2bcc306707dc6db3f95aa1bfb9be90b2ed1ce09862d8e74209f76231e29896bff80fc8a8d713c489ea0a844fcd2dc73d663500ffc9f63198f3536a931638e1c8dbf00c6964c5fa37642267712fe21dee6272858fe1b2b30f8c8740bfbf2ee69cec0036db48393421fefec6f25022c14b2e0e56f02616e67fd7e4c7b9c031e4e03f61af64e6038003c371d28aa4f8ad845b35b7ca4c8b20b24d40a64fffebb541fa77523bc24440df8a252603b5a2629fac667247d062f26b1343d90c6727e962fb67a6ff0d7e708df2411f616a1df5891c78948de295b56ff80719004ad879658216ef8365d9323040ea2d6413fdd578f6287f0b8cf867e8e9d0768f4a4f9a49990a35804d3b7e31c22135ea671a9ce3f941850e70e3e82628503d993dffafb0e7fb2d5de1865b7d0c85fffbe2a0c111cdb2be393b94c2763d2e14412536fb7eac21613ef81b01b8df1f47ee4aa6d266361f0b7873c95ee0f949b18b08c269edf4a0d82d3e2b9f3716643c8af32d74668c52718ed961688aa50840dcf7e87d0a436d014eb2dd73686013096d60acf1ef55d795cacb6ecdec85e26a5b2c49086f2120d4b8df2cf6baa45d70bc5f6b39aeb41e1f76bf52caf30206a70b65b9945080880410b40b12b5cedd9e5c871d8e91926f196a1543280104973306083ddfa7c013798b46daa222d51f68a00255bbd888d6d84057f709c29a323dd384a8c0b8fe87f4adf7f3794386ed7a42e5cc6631353058d00f3851020c9c004c4071b0a1bbb97c5fa603900ba2cbc5be2862cdf491356a30356b7ad73ac36fd1d4dd28652822a08f8318d301d9755414471a7e4190e1a83dcb994fde386119b13e6584fe3266861254e17d583a9b086a499974570ad4393b05266ea82e78951f238aed6c7555fb49a29deb529429570e0abf25e440436cca45e37667bbcba71fa64174cde06140f990c6a6320eed549a3e4a376be2a6b0b56a933b8341e41d2fea460826afeaf967aff374c9f1c8f9f82e2705c25ed6782b279a8ae99a96965f8d6bfdcef341d4ff6d9646eb72d722d7ffb6c23bdc77dec517678df0637c6f688bb897b64fda129b8597d793e8c036f275e7486d1f71cec410e95e8d8760fae26acf2e6199db2f664e7fc544432bfe6a6a36facd1a4f465ef45b728812bccb0f96a2c8500b80b8d00a689bbbc1672783cfaa561f8da72d2d87ea01bdd250059e63e263174cc562f5794acb11006e4c81cbda497d3fb875f6f63c08a5a87735466af9495c5238311ac161a37a2e2e7377bfe49bba1f348f36dd65132881a96b7d44053dd205a28265e6479c558603b9f2c679a8aaedebdab4c3eea69f7bc0785d5ca8382b0bbbd4efe10aca51e77e6f105d5fac95782079d2c9187d19d132a5f0e0ab32482f60252b099b02ebfda304f70b7f5a52a5880ca06e3b82cccedd324f210726e45cb02fbef10d22314ed338ced4c4664bd46f50d1ed508ad99a8fcc9cac0937c8f5238283cf229f2d6b26bc81fff860c0d1b24645a97781cadb773206a84addbbe193db8d39977e47a87b5cce65527a5026e4c110c7132a35eeff3bac2b8f6255a681552521012e87ab4d92ea6ac9149948a595712dcb4cd7ae00ba8cf37b7c0437bb171bfa8648aa706d355da837edda91bc6967853b38de3d9eff4855e849c3dcc0c3124fb066ed9ed5bdb297c247ceb3addf4efe3525d5b7a0b4f7584a77da1174fe2f964047e13a842ac2f6d1ff430044f6da154fb3f9ca7d9d929a4acc22eb73691b6fb46a12432940afb0068f728b9b2a6b0f7f02beb6a5c3aa38804d3bb4e5829c67146e90ba227771995973088a0d669a512c9164166b022215ddea1536ced700c561197ca19387fac3b1cc969e6e4fa91e5a0c39c302854aecfdc65302a5b2b3dbf063f3a1fd4e31bd6b85ba33bf58f2f5c688e1c317e4e786fc08c92a397f47a79ea713f624f2b09373fd81c77545660e808eb6e8a52ffcba992bad75780be4f1f30f8f03ac6b25c3ed4996547d1a0c776c0f5b673c7dcc007087f95b4a8c73d021f7fa456522cff2ac08d76b0aed4bfd506e393da3742095fbda939315a35898ca472643042280d2a1c8b792876bf46c9ee6f0586fca95bb402e517b325fb73bb9cae1273ef55c773605eb567aaa468083ddebbcaea684b4eed895140d0010b2abd589c26f978924e12a3a268f9a458b0db4e9503380d419d2857ec35ffd48a41b7e79e2857c6082c2736336b0a1a018437bebaf478468a6f5f9fbf6c499584421450addc7f991c947506bdc0e4521ef5dbd31d1d44d7039e34fe26b627d490017f8d6b4fce6b9abed48dd397b0a6d97327842a2c2c09ebaca3bf3a549f91589aeadf9dca5262ff51b59fc60bbbdb55c72beeb0635b3146fa0a92a292f0b53a4f5b4b7d7c30ae31f7ac1aedd1d5a5487fb57e5f980114d5e5502af58c12f0e4c2cd81986d08edfeaa99522382987d123e4a1f527fe9015fc4ea6ff73aaa3657bb449565e8ecd73cca91bc00ee59ae4f37497088027864b45c1f9e2ac198df9f7e7707bc179613d46fbbc8c42f45bff46d8808c2a7767efd49bbc3cae25be3085d2eeef6e7bf576a5191585c3b9391397571449f67f1816aa4ee45ed79fcb11558255bf14eff6356e356885972030a9d747e0fbafa0723211178204515eaaac365dee77544846e6c9acebdaf0d2fdce76917c0e42b71ffb9796037fac107bd0cfb0af1ad62abc84508661da61f4f3176f95e870fb62ef132cbb6e5ca1136f99a6bf6560e955667080f55bdce9812101192dd677cebbab90df2744ece85c6402f32f0e4d09eb31a5c15cd7c9249e273e8edae2c0bfb6cd487816560a9b440d78c53373a4a29323540345e4fa7d8db71ad18a10b093db5bcde454a2760a9b586a06ea6fdd6da2f678f84d9865ec99658a4a6621ae1f369af639208f4fa2e64cf3c98dfec4904cf73a919d534ec319192bce6cc2475f3910b0b7d46b91b8237175cc61393b87ecdc8f4daf3a3bd981e64c94326e116dba73ab2347ca7d939731e354acd1a26b472a96133c51a994eba336baea473fabd41c5fb94e2baf39ed1aa2eaf50a5e94be17a1be0af9392f4db193134a9b5e615a93627a4a82579ffb4d3739b5a0c538f4f4b95b7c264a6ae7345ff764f1363436c59f54d0d7c63f67ca221812048b74b575577e28057d67f3cafb356b71b10fca8aec6ffd4f7c121eb4b0ed3cd3bf65e5e5c264d212b7c659fa69eb831e7ada55a892f4ad6f0e2a89e05c0f8542e7749dbe7a48a5037f9365efdf655dcf695e7ff054cdfafdf1261ca8b1b7227fa87ead16849fce43c87829b770d86b8326c22162f488379cc6f9667e94df18c220d62dacdd59d2947976520865ea636aba620e3721514692e654667bde3304ae308bcff8baa7dfd40d71ef9777bcd539fb1ad236fe32cf7900ce521b2908a9dab6baa04bc279ced3ef697300b2faff3e01ddadd5c2efa369d0d9fa5e06166809af4d58900298e3cf1978d0a4247f19b04f65aa2605d0de8178a815946abce6dc467f7b1d8e4b3faac7983c3641b49420464393b10ced81a7b18de3c399abe48547dccc4fda73d1d8b17105352346d5accf2254f9127dd22fb4ca36f2a02950e308cf40c628875089598f4b8afa89e6fd11a3202e9ea28c92ecdcf767e20e73aad9548f24b2b1a5c3218f4e5a378b9ae23f5e4bf68e9bf6d9de0d86a27ca44b1025b9e57566396d311a53b080501ff0c956fc31fb9132fc499f14cfbd0e4f5940d75c58872f6fe9ac7e80baf1c54454b2ce6625c531db372f76f3bee26005bb99ca48120cc79b861e3c1ae87dea95caf13aefcb510296e4608c12dae9cc14333bc5eeb93d23722ade4252bf46f239857a776ac103b349636062b1a9b4f9d151bb1b9790413a42228715634c4b4e550425871a9cdad6dc77efe4b4b3de2036bef3b5055a346f17e6bad6ff3e77d6e44743e6a26f2fc925f52878adbe3d6ed8e69ae5c4160e548ea41d9a9cfe95ea051a87183e95df1af85f16c8c15a6ea30c8d7271c61877acc7a809f9dfa6f39c4e8025baa3df7c94b00022d63f43fe47735f594824440d5a61adad9f3807f08d00c2c6ea7b61786a13a97c5ba3340c90d561d73df3bbac4336367bdc0504af226b1fc29e574cad552a6cdad39b286ba8e8c4fd317b7caa65001effa8a0ab2ebbcb89e15cebab0695ff384c17a3987d5d0258ebc7679ba9abd42b5dd6df1a3fd3307eed9ed425db8e69041033a9ce9d7af7e8b50646627cab931d70d151482170cf0a4cd6eecd8e7409bb2256677f7654f82fbae027665e53a4b0665858b565d81f74c0d062db1d241281b794d15e458e3feef7913f3271c8acf40fa04952e3bd8789360090eb1cde330f1cc6af306952d0e16107935b232b5aa326af05f79b22382dd4b5047725642d6e5a97dda2409f81d3c80187f2baef6589b293dc7567441d202f7c9d1e568a2d906277d62aa819dee3cb952a418900ba9c030ba72d2f9677d2737a5d22594ecfc82258d46de6bd9616f8172e7bfe5efaed8e6a21f660f742ca035b7c720b455cdafd0c2e4228d306dbaf9a42611140033053a0c824e89c4dccaee7f9622cdba71ecb72a69c288f2c71564af65b554b77168391ed9a94e2cfaab61c2c0c9457e2c394648f34a9272b69d495e8fa952afa28f83c3ee56a0b1fe969a9ab7968f538043d78324181790c5b3aae8a9ffe8f4ef1c40a5418507e13ba65615242e6bb2b0d57c04afd4cb40e43a5cd90d2255e00bb248013fb7fbe57f5687ba36e3100a24988db63e317d2e12be3da0f39e63d", 0x1000, 0x5}, {&(0x7f0000000200)="24e6c4ba6a70b7bcdfe58d015f521ae4402bb705f393ab73e52f4b2afe766b14ad3466fc092b0a5b825fd165c46615d03c23e9443993d5ce20f7d9c201ffc70a353ebbd09cf6ab0faf5f1cc3ceae203ed3579c1228a089cd6df30a7a35141ed02896ccc62afbbbcc25ea7f8cf7d4d5b4befe2509a2a3a5a5", 0x78, 0x1}, {&(0x7f0000001300)="be94aeee0fad97a4b080b852e91eba58437ca6ccdb3299d7729576e26b340fbeef74b10cc6c041ef909463473f9bd5bc436d640ab1d14554243d2096db1c937215b2f8faf90ed4662d68935f246dd8f1934867c9c0", 0x55, 0x47384613}], 0x20, &(0x7f0000001400)={[{}, {'rw\x00'}, {'proc\x00'}, {'$'}, {'mand\x00'}, {'\'&,)'}, {'*/$}'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x7f^\'[[{\xf5'}}, {@obj_user={'obj_user', 0x3d, '-{5\x86\xbb\\.@)('}}, {@audit='audit'}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'rw\x00'}}, {@uid_eq={'uid'}}, {@smackfsfloor={'smackfsfloor'}}]}) preadv(r3, &(0x7f0000000280), 0x0, 0xed9f, 0x81) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='rw\x00', 0x0, 0x0) [ 291.954551][T28832] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.969872][T28831] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 291.973880][T28848] loop3: detected capacity change from 0 to 4 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6d, 0x0, 0x0, 0x0, 0x0) [ 292.003609][T28832] loop5: detected capacity change from 0 to 4 [ 292.010288][T28848] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.020023][T28855] loop4: detected capacity change from 0 to 4 [ 292.026469][T28832] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.037864][T28855] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fffe008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20fe00008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6e, 0x0, 0x0, 0x0, 0x0) [ 292.057976][T28871] loop1: detected capacity change from 0 to 264192 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x6f, 0x0, 0x0, 0x0, 0x0) [ 292.101819][T28883] loop0: detected capacity change from 0 to 4 [ 292.102023][T28855] loop4: detected capacity change from 0 to 4 [ 292.118846][T28884] loop5: detected capacity change from 0 to 4 [ 292.118886][T28848] loop3: detected capacity change from 0 to 4 [ 292.125495][T28889] loop1: detected capacity change from 0 to 264192 [ 292.139430][T28883] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x70, 0x0, 0x0, 0x0, 0x0) [ 292.188707][T28855] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.198785][T28884] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.218413][T28883] loop0: detected capacity change from 0 to 4 02:47:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a603008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.232699][T28848] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.243232][T28883] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.269416][T28884] loop5: detected capacity change from 0 to 4 02:47:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x30, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) preadv(r0, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/229, 0xe5}, {&(0x7f0000000140)=""/63, 0x3f}, {&(0x7f0000002400)=""/108, 0x6c}], 0x7, 0x9, 0x6) mmap(&(0x7f00005a6000/0x2000)=nil, 0x2000, 0x9, 0x110, r1, 0x303b9000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x8, 0x0, 0x8, 0x4, 0x0, 0xa, 0x21a30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0x9}, 0x44, 0xaae, 0x6f74, 0x9, 0x400, 0x81, 0x5ac8}) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x71, 0x0, 0x0, 0x0, 0x0) 02:47:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200fff008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.316275][T28884] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200402008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x72, 0x0, 0x0, 0x0, 0x0) [ 292.409661][T28935] loop3: detected capacity change from 0 to 4 [ 292.426651][T28935] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.430104][T28940] loop4: detected capacity change from 0 to 4 [ 292.443386][T28942] loop0: detected capacity change from 0 to 4 [ 292.454053][T28942] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.475428][T28935] loop3: detected capacity change from 0 to 4 [ 292.489917][T28940] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x73, 0x0, 0x0, 0x0, 0x0) [ 292.511678][T28959] loop5: detected capacity change from 0 to 4 [ 292.524657][T28935] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.534635][T28942] loop0: detected capacity change from 0 to 4 [ 292.543097][T28959] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x74, 0x0, 0x0, 0x0, 0x0) 02:47:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept$unix(r1, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000180)='proc\x00', 0x0) signalfd(r2, &(0x7f0000000080)={[0x2]}, 0x8) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='dirsync\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) mmap(&(0x7f0000326000/0x3000)=nil, 0x3000, 0x0, 0x10010, r3, 0x49743000) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x4, 0x800) openat(r4, &(0x7f0000000200)='./file0\x00', 0x101000, 0x0) fspick(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 292.556793][T28940] loop4: detected capacity change from 0 to 4 [ 292.563681][T28940] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.579211][T28942] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a703008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20feff008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.669025][T28959] loop5: detected capacity change from 0 to 4 [ 292.679124][T28959] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x10000000001000, 0x0) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000001240)=""/4093, 0xff0}], 0x17e, 0x1f40, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x75, 0x0, 0x0, 0x0, 0x0) [ 292.716913][T28996] loop3: detected capacity change from 0 to 4 [ 292.755773][T28996] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.770699][T29003] loop0: detected capacity change from 0 to 4 [ 292.787208][T29007] loop4: detected capacity change from 0 to 4 [ 292.797566][T29003] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f0000000440)=@xdp={0x2c, 0xf, r2, 0x34}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="b3c6b076069d2a691962cc8214bad7eed6aa47f969a064f5e71d56e7df1c1a158584d5a5d15965593a54fccea994404b71d948f1ee87b3f37ec1862c6570499a41255c8aa4e292fb52511bb9a94b5da5440223dc3ba8a3dc318ecf8894b03d4dd07f5564bf8a8638fc28e1add94e58ffb8286aab2b51fa072e26bbb4611aff2d1e15780fef13667da9a31f3764463b22024b963d57324e869a46105e5a55bac815c191b317a58e75de96d521b89c37c4", 0xb0}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="5a22004e120720306ea1c15989bca5d4f2a454b0028b3dd0c7eccbcabaaa8af444b3cc5b6dbfa853a2f64f7c3108c2822f6409d24e4f6d6e459a4307749d1f69c7c8f41c3b62118d392a17f0252ebbcb3af33863abaf2564fe0e91767f501bee91b6ba33a0", 0x65}], 0x3, &(0x7f0000000740)=[{0x28, 0xf, 0x800, "b23b39976d7ee3f13a76120178021480913211bb"}, {0x30, 0xff, 0x9aa, "c0554d81a9d31d58cdc7e34862c96c0a06ac8fdeb31980b4ebfc3bc25fc41a"}, {0x1010, 0x10f, 0xfffffffc, "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"}], 0x1068}}], 0x1, 0x4040000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x76, 0x0, 0x0, 0x0, 0x0) [ 292.818885][T29007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.822605][T29019] loop5: detected capacity change from 0 to 4 [ 292.839684][T29019] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.863092][T28996] loop3: detected capacity change from 0 to 4 [ 292.870395][T28996] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.882490][T29007] loop4: detected capacity change from 0 to 4 [ 292.888749][T29003] loop0: detected capacity change from 0 to 4 [ 292.900165][T29003] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a803008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x77, 0x0, 0x0, 0x0, 0x0) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x801, 0x0) sendmsg$inet(r2, 0xfffffffffffffffd, 0x4004) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2005f5e0ff00000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.914444][T29007] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 292.931491][T29019] loop5: detected capacity change from 0 to 4 [ 292.945053][T29019] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200008008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200204008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 292.990154][T29058] loop3: detected capacity change from 0 to 4 [ 293.004727][T29058] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x80082407, 0xf04a00) fremovexattr(r0, &(0x7f0000000040)=@random={'trusted.', 'mand\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/62, 0x3e}, {&(0x7f0000001440)=""/125, 0x7d}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/161, 0xa1}], 0x7, 0xaf, 0x5) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x10000, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xe4551000) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x5) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000100)={0x0, 0x2, 0x80, 0x100000000}) fsmount(r3, 0x0, 0x77) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x78, 0x0, 0x0, 0x0, 0x0) [ 293.050384][T29071] loop4: detected capacity change from 0 to 4 [ 293.078782][T29071] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.089913][T29058] loop3: detected capacity change from 0 to 4 [ 293.096075][T29076] loop0: detected capacity change from 0 to 4 [ 293.104616][T29058] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.119472][T29076] EXT4-fs (loop0): bad geometry: block count 255 exceeds size of device (1 blocks) [ 293.126515][T29071] loop4: detected capacity change from 0 to 4 [ 293.129271][T29088] loop5: detected capacity change from 0 to 4 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x79, 0x0, 0x0, 0x0, 0x0) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2a1000, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0xd40}}, {@sq={'sq', 0x3d, 0x8000}}, {@timeout={'timeout', 0x3d, 0x4}}], [{@uid_eq={'uid'}}]}}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) lseek(r0, 0x4, 0x3) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) [ 293.146843][T29088] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.157643][T29071] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a903008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x80000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfxno=', @ANYRESHEX=r1, @ANYBLOB=',posixacl,msize=0x00000000000000de,noextend,obj_type=mand\x00,uid<', @ANYRESDEC=r2, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB=',hash,rootcontext=root,\x00']) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000300)="a605441392a304c7542cc426ef9d8aa659aed0ffa5e2c120757c352e4aadc6d9c2dacca8383db83dc2e27191ccb0fb646d9b44f58818b95ab44ea14ed2519eff53c70e37960fbb4ca8366ec18278d18971cd00a4786764a6d21fc6c0146e152cf2", 0x61, 0x3}, {&(0x7f0000000380)="28835db6c1a7043e2a546156dab1c9860f40e47815668bce52de92e41581f15191483e330ec6d2bb173a356ad76e42590d9d8e02b7b966f2201720667c5fba8d525c2ba589f4c9d8e33626680ac73efdc6eeaab2c008f03ad56ca6", 0x5b, 0x9d0b}, {&(0x7f0000000400)="ef0230a008db0d2d1ee5e6fe6781ae32355e3dd039e3ceffe3771c8a0d15f0ae54107ff03fcf82eefbefbaf70208a934dcda6e40c7112314c92c8a290c8fde54506b88ba746d166f4be8f57dfda95cbd184be595e24dca456ba66d17f1fddff6b10e063173a3c3682ef6091d1fc04bf73baa669b0f54640b8de6b4c1b344bde3ec54041d0de9f2ad133d4c599d83e50f5c472c16323b042ffc22e858b9d4f23ae333fbecf6fed5d1cb82308a7d2fea99897c06729eeb9c5b8d70a31ec981", 0xbe, 0x8}, {&(0x7f00000004c0)="f02285324b960d8fcdb477128b4cecc1cb3330f307f39e79bea4801ca2c887fe0c4f750254d1917f3eb0112fa25699070d4fb625fd6bf9", 0x37, 0x6}, {&(0x7f0000000500)="5887e7850eaefc0becf48b359a5ff563c9a98dbe92e76bfbac11ed1058c26e1f5707447cabbb0e207ce0d914f26a4ace6164dce89916a048510029df11c543a3914e68e7ba1d3d50d9f867d75142f97ad85f073a05ec0bc2ea32d71f8339cf61f9d870cb33e4baee312e4c4657feba5dbb4e312b73f301", 0x77, 0x8000}, {&(0x7f0000000580)="5240697f43d4e1dfb675e4c9b34592594931a08cf7746869117f8c206fb6b5f6fd15d81ec64f729f1e860382b814a60dc895", 0x32, 0x7ff}, {&(0x7f00000005c0)="dfe6fdf6174a68270455b542bf456d9bd3ef2fd1bd7b01cdffddd1db8205cf1246860184584c903a3298d7c526b95f8d2cb9ad0ec45a2df2aef7d02bd82e4741e6b4505af7b7f0e2be18", 0x4a, 0x1}, {&(0x7f0000000640)="3d79bae9093d9d69766040454a20025207557730983381fb01ecf40989afc9a7774ae2853fbd83a336380e6a4b2169cddecb4e80f5c96ea42696dc8ef204c0", 0x3f, 0x9}, {&(0x7f0000000680)="8d1f2f67c098ae3f7c26c754729a83b36d3459ead30a296ce00a55e1779f9bdda76fafaa0044fb471efb9b687eab9d8bd11f2663adf9c1e700164c9b", 0x3c}, {&(0x7f00000006c0)="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", 0x1000, 0x3ff}], 0x840840, &(0x7f00000017c0)={[{@overriderock='overriderockperm'}, {@session={'session', 0x3d, 0x2c}}], [{@subj_user={'subj_user', 0x3d, 'uid<'}}, {@subj_role={'subj_role'}}, {@euid_gt={'euid>', r2}}, {@appraise_type='appraise_type=imasig'}, {@obj_type={'obj_type', 0x3d, '$*-!\'\''}}]}) 02:47:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 293.209885][T29076] loop0: detected capacity change from 0 to 4 [ 293.219726][T29088] loop5: detected capacity change from 0 to 4 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7a, 0x0, 0x0, 0x0, 0x0) [ 293.252430][T29088] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.262044][T29076] EXT4-fs (loop0): bad geometry: block count 255 exceeds size of device (1 blocks) [ 293.289412][T29134] loop3: detected capacity change from 0 to 4 02:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200604008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200002008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7b, 0x0, 0x0, 0x0, 0x0) [ 293.300053][T29135] loop4: detected capacity change from 0 to 4 [ 293.305551][T29139] loop1: detected capacity change from 0 to 157 [ 293.313508][T29134] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.331165][T29135] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7c, 0x0, 0x0, 0x0, 0x0) [ 293.375674][T29157] loop5: detected capacity change from 0 to 4 [ 293.385330][T29157] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.398299][T29134] loop3: detected capacity change from 0 to 4 [ 293.404695][T29156] loop0: detected capacity change from 0 to 4 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1edeea28aab2", 0x6}, {&(0x7f0000000080)="a1336c50624cfd55fecde40521fdf2dd6250946db0980194302c6885388712403c73c3031f4cf219eb4ae77a1982f34bd79f4c16443834bd8f345e6a6f6f9839dbf1acc0ef5f1533f908c5fa37f34c6a190f0d3504188e6c401cc4225c7c350532300dca209db177be02d49618e5fab5f86d8739b8562b1a79e24bf1754ba227993ccdaa66e2605a288925fd673500648b9eeff2c8ac6323d104cb4dcb93abf1dd0f5f169c1c2dd39d5de9a12875df66a8a9f8844b6d5393e2e6079016cafad887dbce5cd5c7e0f6a7a98067903b131bac7da046b71b2d5b4b3ec4eae3abe83b4c8f4b7a82f078b94ccd", 0xea}], 0x2, &(0x7f0000000200)=[{0xb0, 0x3a, 0x7f, "45266106414b4acf124f62b451dc269f3b00d9ee5b4606f485ac2fa7d24bec81b9d82ebb534094b2c9954ad92d7b475c916182bcec9d0349adb0d575fdc1c98de40c5bba86373ee565b4e9df47842e0b372fcc8bf8a87a03e1e6eeccf1d98b79a13922b220d55df9a5e36430d83f69d118d51b1bcd499c0fd1f950ee402d9a9951f2f29d7c9e04e09479226d561d9ffed75c0a7fb4b1888abb3c891651d3"}], 0xb0}, 0x800) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 293.422888][T29134] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.443286][T29157] loop5: detected capacity change from 0 to 4 [ 293.444068][T29156] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.461156][T29157] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20aa03008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x101, 0x14, "3c8ed7c3f4eed16fb2b7514fe252a32aba4f7f"}) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f0000001300)=""/112, 0x70}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/206, 0xce}], 0x6, 0x0, 0x891) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000001580)=0x7f) 02:47:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7d, 0x0, 0x0, 0x0, 0x0) [ 293.464073][T29135] loop4: detected capacity change from 0 to 4 [ 293.479030][T29135] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7e, 0x0, 0x0, 0x0, 0x0) [ 293.539997][T29156] loop0: detected capacity change from 0 to 4 [ 293.558494][T29203] loop4: detected capacity change from 0 to 4 [ 293.566968][T29203] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.578230][T29156] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4c}}) r3 = socket(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000100)) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000002c0)={r6, 0x918, 0x5}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000180)={0x1b, 0x5, {0x7ff, @usage=0x2, r6, 0x4, 0x1f, 0x7, 0x100, 0xffff, 0x40, @usage, 0x8, 0x5, [0x0, 0x5, 0x3afbae36, 0x3ff, 0x1]}, {0x2, @struct={0x5, 0x4}, 0x0, 0x86d, 0x8, 0x7, 0x6, 0x80, 0xa3, @struct={0x62185e88, 0xd60}, 0xffff, 0x0, [0x4, 0x12, 0x2, 0x890b, 0x937, 0x4]}, {0x7, @struct={0xfff, 0xbf}, 0x0, 0x5, 0x2, 0x4, 0x8001, 0xfff, 0x40a, @struct={0xfffffffc, 0x9d99}, 0x0, 0xda, [0x6, 0x380000000, 0x0, 0x6, 0x8, 0x272e]}, {0x80000001, 0x3, 0xfff}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000180)={r6, "bccf9d6d94ada5ed9c78c8a8fc727582"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000000c0)={r6, 0x9, 0x8, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{r1}, 0x0, 0x12, @inherit={0x58, &(0x7f0000001580)=ANY=[@ANYBLOB="00000000000000000200000000ac000000000000010000000600000000000000040000000000000000000100000000000400000000000000ba6e00646d60322401949e000000000000000000000000000000000000000000e8e3f7534879464514410decdb045383e82171a699dab105f954485f115309447e449b1706deec77d3ac3e2d633541fc88f3abb6d0d40725da00"]}, @devid=r6}) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 293.628343][T29203] loop4: detected capacity change from 0 to 4 [ 293.642194][T29203] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.642269][T29212] loop5: detected capacity change from 0 to 4 [ 293.654498][T29214] loop3: detected capacity change from 0 to 4 [ 293.661290][T29212] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:38 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200003008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:38 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x82, 0x0, 0x0, 0x0, 0x0) 02:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 293.677658][T29214] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mlock2(&(0x7f00006f7000/0x4000)=nil, 0x4000, 0x1) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1}) [ 293.738315][T29212] loop5: detected capacity change from 0 to 4 [ 293.747028][T29214] loop3: detected capacity change from 0 to 4 [ 293.761521][T29212] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.771052][T29247] loop0: detected capacity change from 0 to 4 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x83, 0x0, 0x0, 0x0, 0x0) [ 293.789715][T29214] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.803278][T29247] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.819675][T29254] loop4: detected capacity change from 0 to 4 02:47:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20ab03008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x18a01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000153000/0x1000)=nil, &(0x7f00002e4000/0x3000)=nil, &(0x7f00005f6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000644000/0x4000)=nil, &(0x7f0000666000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000f8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00006f1000/0x1000)=nil, &(0x7f00006db000/0x4000)=nil, &(0x7f0000000080)="6d0af3d2014a7b0dee9d18", 0xb, r2}, 0x68) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='(*:-^%{\xc6@\x00', &(0x7f0000000300)="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", 0x1000) r3 = fsopen(&(0x7f0000000040)='vxfs\x00', 0x1) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x88) 02:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x84, 0x0, 0x0, 0x0, 0x0) [ 293.870121][T29247] loop0: detected capacity change from 0 to 4 [ 293.874486][T29254] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 293.886205][T29247] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 293.957341][T29254] loop4: detected capacity change from 0 to 4 [ 293.976629][T29254] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x72657882fb705719) lseek(r2, 0x80000001, 0x2) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x5, 0x9, 0x3, 0x5, "e89fa60c8c8a4db7d8e9a24f5c47173280f80c0389d72ea9c1405e02477915bf70122eddc0e96b6e15e9d0291c4197c20c032ded276e0be694070ed404443b2a", "0abfa121b298f16cce924c0a1d7fb70dfa5148019ea6d1621c76a05bfb52f636", [0x6, 0x8000]}) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x85, 0x0, 0x0, 0x0, 0x0) [ 294.008008][T29283] loop5: detected capacity change from 0 to 4 [ 294.017284][T29283] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.030945][T29291] loop3: detected capacity change from 0 to 4 [ 294.079244][T29305] loop0: detected capacity change from 0 to 4 [ 294.085793][T29291] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.089201][T29283] loop5: detected capacity change from 0 to 4 [ 294.101961][T29306] loop4: detected capacity change from 0 to 4 [ 294.111174][T29306] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$unix(r0, &(0x7f0000000040)=""/222, 0xde, 0x4a1eb6bcbf6abdeb, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x86, 0x0, 0x0, 0x0, 0x0) [ 294.116398][T29305] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.160468][T29283] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.169937][T29291] loop3: detected capacity change from 0 to 4 [ 294.176267][T29306] loop4: detected capacity change from 0 to 4 [ 294.199437][T29306] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x87, 0x0, 0x0, 0x0, 0x0) [ 294.211559][T29291] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.221115][T29305] loop0: detected capacity change from 0 to 4 02:47:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20ac03008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) mmap(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x0, 0x2010, r1, 0xd7190000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x1010, r0, 0x1ec81000) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1, 0xd9f, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) fsopen(&(0x7f0000000080)='ufs\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) dup2(r2, r0) 02:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.269716][T29305] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.284122][T29352] loop5: detected capacity change from 0 to 4 [ 294.292344][T29352] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x88, 0x0, 0x0, 0x0, 0x0) [ 294.316218][T29362] loop4: detected capacity change from 0 to 4 [ 294.325417][T29362] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.335411][T29361] loop3: detected capacity change from 0 to 4 [ 294.343087][T29352] loop5: detected capacity change from 0 to 4 [ 294.354896][T29352] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x1) 02:47:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200406008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.368770][T29361] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.382048][T29362] loop4: detected capacity change from 0 to 4 [ 294.393610][T29362] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x89, 0x0, 0x0, 0x0, 0x0) 02:47:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.417863][ T25] audit: type=1400 audit(1618714059.675:17): avc: denied { relabelto } for pid=29380 comm="syz-executor.1" name="syz-executor.1" dev="sda1" ino=13855 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:ppp_device_t:s0 tclass=file permissive=1 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="f0549e5c9e3b92a93ff4bab933ff50ea0ebc19ccaa37a988e20839a58282f9b805740835ca0566aab05060b7df8a0b8acd60a7e3159b093a775900fa6b6ffc1ec4fa19115cfeed8e", 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) fsmount(r2, 0x0, 0x8) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f00000001c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x37, 0x38, 0x65, 0x38, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x37, 0x74, 0x35]}}, {@huge_within_size='huge=within_size'}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@huge_never='huge=never'}, {@gid={'gid', 0x3d, 0xee00}}, {@mode={'mode', 0x3d, 0xffffffff}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x2d, 0x37, 0x2d]}}]}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 294.475601][T29361] loop3: detected capacity change from 0 to 4 [ 294.483907][T29361] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.503401][T29397] loop5: detected capacity change from 0 to 4 [ 294.511813][T29399] loop4: detected capacity change from 0 to 4 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8a, 0x0, 0x0, 0x0, 0x0) 02:47:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20ad03008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f0000000040)='mand\x00', 0x0, 0x0) [ 294.536550][T29397] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.548019][T29399] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.557689][T29412] loop0: detected capacity change from 0 to 4 02:47:39 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8b, 0x0, 0x0, 0x0, 0x0) [ 294.588704][T29412] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:39 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000540)="2e0bd4fac1545182e8fa3b60d73e0139287910d2d7ef3958ef4fc22017faa37820259b7f14752072715067cb9ee4e6c3ef239969f3c97de302c5c2462bd1dab39b7fbdda21ce050e089fd40666a51a1b7de9090c99f325d3f0c25129aaffa0bd070b979825a999b40602a83d08dae3416edfdb51ccdddfbb19dfbc9d608245b73f6d6dade8878ad155f615e857da51f3ec1ced8b1fafb7ba95d12f54b19f335d45f05599ce5d4e22e2a4a5cb5d62dfc8dfc41bd7039ad3f459861e070da5265db589eb09875d7196f3026a1cbea8f2343405fed4b2ee74ca334d969a8f8ffaab38", 0xe1}, {&(0x7f0000000640)="289420b9b4363424647b02fd576a10558ca2d2e2af69429caf9a", 0x1a}, {&(0x7f0000000680)="12195932c2fa870782a40644dc2bb3138ef20fbbd365164753bee8385551e930d143e14ebeb7c72547f95fd02cfd64e987165e5d", 0x34}, {&(0x7f00000006c0)="1d1caebe41f8abefb6c09892b15a40c0072a4521b56ade709a5218eed44575d566e4e37303ef7228c4b53b691d95474ea299191cdb0f131175452c386c9710329fb550ad8060dd7aa068858fd87e45519b39ca", 0x53}, {&(0x7f0000000740)="acbbf248c887c0fe6077814c44878d5e882f991a9bca3ee11f30ceeb003aa0a3532262e416ad0ed5a1d22d318d75b188111d59e944cd1356f4083720d1cf44908e14ce0861e309185fd9b5a9632db50322913d931021e7028085cb4374453a30a45f0ad83fb2819b9ce44e9f55d14e85a44cf140624e2981301fa030eae66c496a29ac107da08ba495a04e759db45c0c8bee6980e980d3df2b591c30f43f91a4669f201122e284cfb19b91b7590eb13175e21a6731611f34542d751ecd7f48e91d67a7ff10f45e79defaf802fad1c6ff4c0d7b6e4dda4226c75dd0a245bbb205299aa2d487125856ed369d65", 0xec}], 0x5, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980), 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf8, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x71}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cd4b29f62b2efa303977b5712befefcaa7d8d3ba724051c7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d3d0406e85340954c1cf2cca04eb2b4d857e82703b38bf8"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "575cd236d919b92e1200bba190eca06fa14bad7cef3599f3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a967655f0d0d70cdd5970e95903a603ddba911d898606bad"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1db4625b4e275405de6d5031473a23ac3cf11ebbee392f69"}], @NL80211_ATTR_4ADDR={0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c000}, 0x40811) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="1500"/14], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fbdbdf25050000000500060107000000280001801400020076657468315f746f5f7465616d000000080003000000000008000300020000001c0001800800030002000000080003000300000008000300030000004d9634"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x48094) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_setup(0x250, &(0x7f0000000280)=0x0) io_submit(r5, 0x2, &(0x7f0000000500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0xa6e, r4, &(0x7f0000000340)="3beabeab9564694e76d246ac7637db07fb0d1c690ea65e04e82d9b2edd224f5f0e", 0x21}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f00000003c0)="9dea34b965981c0114724d1e464839291f74b66251c9e46e40849fe16d8e2945f59ad5b13e757021172eedbbe3da1fe3f35469d18f1e969ad94975185b167eba080319781daea41c9bf0e79ce95f69f626601784235dfa1c02c232794a1c9403d2d739d52b4174b3d4e63771c5a523f57e33baca2fece1923321af20d1c3a4f02223284350d479ab4c32d6801d3fa03973f7c8231f8d0d8a3c6431f889359eac4b845fb0f141c05b4c055f46bf491547ff6c5e0dd75f50040c49a47e2938ad7752b6e085551b78a82d9e78e0d9df36b9efc418829106bc70a941417de9f3d030e47d0085d967c1d7902f79e5180de3f81295bee0b9", 0xf5, 0xa9, 0x0, 0x0, r0}]) getpeername$unix(r4, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r6 = fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 294.643163][T29412] loop0: detected capacity change from 0 to 4 [ 294.658231][T29397] loop5: detected capacity change from 0 to 4 [ 294.662544][T29429] loop3: detected capacity change from 0 to 4 [ 294.674836][T29399] loop4: detected capacity change from 0 to 4 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8c, 0x0, 0x0, 0x0, 0x0) 02:47:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.687055][T29412] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.709437][T29399] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.724619][T29429] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.725645][T29397] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8d, 0x0, 0x0, 0x0, 0x0) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000035c000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 294.789331][T29429] loop3: detected capacity change from 0 to 4 [ 294.795667][T29473] loop4: detected capacity change from 0 to 4 [ 294.805988][T29429] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.816278][T29473] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.823001][T29470] loop0: detected capacity change from 0 to 4 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xda0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8e, 0x0, 0x0, 0x0, 0x0) [ 294.835000][T29470] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200204008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 294.886862][T29473] loop4: detected capacity change from 0 to 4 [ 294.900605][T29470] loop0: detected capacity change from 0 to 4 [ 294.907298][T29470] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 294.918159][T29473] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x8f, 0x0, 0x0, 0x0, 0x0) [ 294.960228][T29507] loop5: detected capacity change from 0 to 4 [ 294.988642][T29511] loop3: detected capacity change from 0 to 4 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0x5de7, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4a) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000b40)={&(0x7f0000000980), 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000890) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 295.007963][T29511] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.010857][T29507] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.040253][T29524] loop0: detected capacity change from 0 to 4 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 295.053712][T29524] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.075858][T29511] loop3: detected capacity change from 0 to 4 [ 295.097081][T29507] loop5: detected capacity change from 0 to 4 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x90, 0x0, 0x0, 0x0, 0x0) 02:47:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000040)='\'(\x00', 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200604008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x91, 0x0, 0x0, 0x0, 0x0) [ 295.098778][T29511] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.117027][T29538] loop4: detected capacity change from 0 to 4 [ 295.123806][T29507] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.138849][T29524] loop0: detected capacity change from 0 to 4 [ 295.145919][T29538] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.200299][T29524] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.209386][ T25] audit: type=1400 audit(1618714060.465:18): avc: denied { module_load } for pid=29562 comm="syz-executor.1" path="/root/syz-executor.1" dev="sda1" ino=13855 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 295.237249][T29538] loop4: detected capacity change from 0 to 4 [ 295.240667][T29563] Module has invalid ELF structures 02:47:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200008008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x121003, 0x4) 02:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 295.251903][T29538] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.270533][T29563] Module has invalid ELF structures [ 295.289243][T29578] loop5: detected capacity change from 0 to 4 [ 295.295519][T29573] loop3: detected capacity change from 0 to 4 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {r4, r5/1000+10000}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 295.335873][T29573] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.353672][T29578] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x93, 0x0, 0x0, 0x0, 0x0) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1800000, 0x8010, r0, 0xebbda000) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) [ 295.416065][T29587] loop0: detected capacity change from 0 to 4 [ 295.448241][T29573] loop3: detected capacity change from 0 to 4 [ 295.463972][T29587] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.473432][T29578] loop5: detected capacity change from 0 to 4 [ 295.478214][T29605] loop4: detected capacity change from 0 to 4 [ 295.489522][T29605] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.502266][T29578] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x94, 0x0, 0x0, 0x0, 0x0) [ 295.516414][T29573] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.540253][T29605] loop4: detected capacity change from 0 to 4 02:47:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201004008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x5) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x20) r2 = fsopen(&(0x7f0000000100)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r0) fsmount(r2, 0x1, 0x70) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x95, 0x0, 0x0, 0x0, 0x0) [ 295.568491][T29605] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x96, 0x0, 0x0, 0x0, 0x0) [ 295.636520][T29641] loop0: detected capacity change from 0 to 4 [ 295.664666][T29650] loop5: detected capacity change from 0 to 4 [ 295.671452][T29641] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.693447][T29661] loop4: detected capacity change from 0 to 4 [ 295.702045][T29661] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.720375][T29665] loop3: detected capacity change from 0 to 4 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x97, 0x0, 0x0, 0x0, 0x0) 02:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0x1, r0, &(0x7f0000000080)=0x7, 0x7, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 295.738654][T29650] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.750874][T29665] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.778796][T29641] loop0: detected capacity change from 0 to 4 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='{$&\x00', &(0x7f0000000080)='.)\\-\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) mlock2(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x1) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x98, 0x0, 0x0, 0x0, 0x0) [ 295.794385][T29641] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.803801][T29650] loop5: detected capacity change from 0 to 4 [ 295.823362][T29650] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.825183][T29665] loop3: detected capacity change from 0 to 4 [ 295.839954][T29665] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.864215][T29698] loop4: detected capacity change from 0 to 4 02:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200005008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='totmaps\x00') r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r3 = accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x80082407, 0xf04a00) sendfile(r3, r4, &(0x7f0000000280)=0x52, 0xa30) r5 = mq_open(&(0x7f0000000040)='\x00', 0x40, 0x80, &(0x7f0000000080)={0x8001, 0x1, 0x8000, 0x1}) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00fb79021f474d93170f210c8b77dfdd6c7345f68969049a7959f0edb1d07d165bd4abb2f7e71b1f5cff3960df08c7b52f3839f0b62ab2d9f832ac3350a1e0b96074a1e291765bb132ae9bf32cf73fb5ac1c7ceaa9149b056a209cfa66a7cef4b00000000000000000655c783916e550abed6f66b8921d6d51dd634588964143cc181326d03bc85f0adf16998df869dafd72d0a58523a66560c3c15bbdffae978aee50661e3927ad41ce84db524f8c9f6fdacfc805f4927c496ca0"], 0x79, 0x3) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x99, 0x0, 0x0, 0x0, 0x0) 02:47:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 295.888465][T29698] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 295.924752][T29698] loop4: detected capacity change from 0 to 4 [ 295.947516][T29698] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 295.982027][T29725] loop5: detected capacity change from 0 to 4 [ 296.001389][T29727] loop3: detected capacity change from 0 to 4 [ 296.001582][T29725] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.016960][T29727] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9a, 0x0, 0x0, 0x0, 0x0) 02:47:41 executing program 1: setuid(0xee00) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "82738d6ba389c3c44123230c8ccf83e82aea8c2f44b352bb09ddee2419dd15491396c701d4422707af22aad65f6b05d7c74e8b4f710ed00c5631d781c21b01be965fa6282886163994c9809433be6bbe03c1f2b906b5486d1f18e2c74b36061b0084abf487cd4681e93035efd36fb14d8afc3675687afa3b5b8ce24d0de939f3abd6fc962450abe3544f1da1ea641cc801778419f69265812d0c24c16e014bf179896e9df2846294aa783885c3aece8afa4ed2865e402a8be9c916f6f29869a2406542a445cdde507c864b6c5dc94e72e2ba662e2dd93c23bbbb3b6f0b3d9d2fdcdc2e"}, 0xe7) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 296.034176][T29730] loop0: detected capacity change from 0 to 4 [ 296.043036][T29730] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 296.080354][T29725] loop5: detected capacity change from 0 to 4 [ 296.085444][T29730] loop0: detected capacity change from 0 to 4 [ 296.096829][T29730] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.109722][T29725] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.109787][T29750] loop4: detected capacity change from 0 to 4 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9b, 0x0, 0x0, 0x0, 0x0) [ 296.139507][T29727] loop3: detected capacity change from 0 to 4 [ 296.157748][T29768] loop0: detected capacity change from 0 to 4 [ 296.166873][T29727] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x2, 0x2, 0x3f, 0x7ff, 0x2}}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffbff, 0xffffffffffffffff}, 0xe010, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x30001, 0x0) openat(r5, &(0x7f0000000200)='./file0\x00', 0x101000, 0x21) fsopen(&(0x7f0000000180)='proc\x00', 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x80082407, 0xf04a00) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="e1f0bc07807d550de427e496612ebe5d976a80e7552ce185da9e3fa789bf08869dd29ea707baad87a5a99d9c19541d1a99e70173fb0fd20901f0b489871ea6cbfb03ed371aa210867924452a2ba02a5ec7a5f50cd4d6adc1a9705a0be2b90ff78df79685ceea8562b49a43133f3e55d8bc7250145f0d116941c303ff145114d7ec83680f139c08e9a9486f3284d896ed1a3400b5355e2ef053ed6acbe20774e88a8a1b", 0xa3}], 0x1, 0x2) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f00000002c0)='sync\x00', 0x0, 0x0) [ 296.186122][T29750] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.211481][T29768] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9c, 0x0, 0x0, 0x0, 0x0) [ 296.243624][T29750] loop4: detected capacity change from 0 to 4 02:47:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000327000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0xd9f, 0x7) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9d, 0x0, 0x0, 0x0, 0x0) [ 296.284501][T29750] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.298585][T29768] loop0: detected capacity change from 0 to 4 [ 296.298593][T29795] loop5: detected capacity change from 0 to 4 02:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 296.341778][T29795] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.359826][T29768] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.369671][T29813] loop3: detected capacity change from 0 to 4 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9e, 0x0, 0x0, 0x0, 0x0) [ 296.394472][T29813] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.407244][T29795] loop5: detected capacity change from 0 to 4 [ 296.421888][T29813] loop3: detected capacity change from 0 to 4 02:47:41 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000080)='\\%\x00', 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="070103015d030000b502000000040000aa02000080000000000000000000000081890995877e550d0d8bf58b5ebb27c251285ff8ed752440e9f91ae0e2ce8ba34c45637d293f891fe32aa0eff84444d307bb3339d8b9f401286b2191a1a1caf85d10f66e3389dcf4e400f7194df44a33620c8a635b895809525d9208629246a8283b60956dd26aa1ca76e15109cba43d029dc6651c5e990414a7de41cf486f665fa115c6d0473ce0b8f21fb8f13b3fe7423cee5147d28138efb6e2a46bb7201ca828e3d1a67ef5bd8ded307f7c36b123b029cbb1b8822a36b1bc745ee4c7df3e5827a45717d534a0c8d27734b1709db388a460f12ea8447f490cf00db7c3737d5aea375f463f013a37c890a1a39cae172da58afc448c888b574f136d58d4e0a8b3f182d4f613cd65c9fded78543517965dac392764b1b3c0482b87999f4821d29e69a299e796d1108a09dc72931445ba377395f55fce88592b9fb879bba5d84dfb98dc582fdd0c4ef582f66d2cce5e236991001d444d6bc07c325419c1e6cfd4d3d19bfa698a0902945f9747f4a213c03745911b9d53aa91b4791edb4c5f374587207e3182f682d8900b8cd8d567aefaf5f9f91eeebcae12b116ca08253dc5b30f4571c167fa131d6adb0f5b6754a336adbcea8ff495322d2b327863d87c4fb2ceda49fac8e82c1bb950c641e7f378bf18786c36a4fab81aefa560085bdd69ab9cf99db68658b8a75b2be35c70ddab2f2a67047c6ecfe8386e81a0e561094557668a4f27ff96a7e3d1f6d644e21644b22028837d6a5735151cf428c0436a16b43ca0533bc2465ea65c38c8b2251a2f11f92ba6e0aa6e45118284e17d1cbe09d0a22330a85aa5faaccc6f98c4b46e4bf5f821cd46b53a9b27835edf9e8c2da63c720b93fe36c2825709c0f8dfc84370d9695b50f0087615ff8ef21abf0946ca72b925bab65b874cc5719747a97f99a49bc3b15f0850662022c7894fd0abdc22e233cdb2ed1f1628d0a353b79501824ebc2142cf4eb64bfa0b37b7d05a8fca612e990845429846f3c5368dc5bf0b00b7b0473bacb39b935f0e6dc31c6b7ee9903e2535d6053bb9a1965cbe5e52439bc5ace78b4be5880891a75d3ecf4f1391fa53570e39abfa648c76259e001d1c132cf680323b08aa29cd599f4555ba0bc1549cdac4809b529ef8fee79428d930e01d9f599d9181e307c5a8b34d467f75999789fc318bec20aba97cd913258419cad536752c1f7535e23051fbe0dcf1989416ffe67bf6c35a829f642471d634d3a4c303e8ab33f8afe982ca8391599728ea150f420cf43787d9869f096a65aed34f0002e54e1a1984e4e077652a10024e57e69f339f0a8fe55cb516a5bdf67c9f0aff8c7334eaf73a8bd6a402f86c797cd156218dbd3d38d8c04e8f6acefec4fca28a99742b24e39543d8a73e5469121e43463ed0c66c2fa91d6bef1af99bf1d22de385371e53c4c1e9cb53ad27c7838f084ed4f1594db2df9b26fb836d9937a4b7c7a810419d2d402d92b7a89d02d8996cc5fad0c92c04f0d64587aa66863cad83816d1446fb24950ab9e7a3479c83b69a8bba98f75318da9bae21d397aab75d21c8c2f100adfabb08e317fe7af9878d5f213cc0c5541e0cddc60148d224be07dd47372731199eea5900a43be6f63f0e90df034b447eb257fb0f3ae9ec9ea6cceb0924eae7816cdd1fa22616f774bf7e90ace7fdeec4709a4cdfc101e6bfc981843874845b83a946467297073220b9bde3e064fad834bcecaabf7ddead46aeeec0dc81858d070bc71443be2fe17f6ae108493f86fde9abc3de09f030cfbd95ca40327869ca47cef50f1753ea0b73dae9b96ea664bcc805ddc47017c0a703fddaa75db253c7290106e661b15684367334f3c9456e5d0ed8511c0d367d7dc7984fe5b24ac6d105253dc2a6a2eb4c36dd37a116a6019adf1e7c467345e3dcdb216b430b5fa3e7be48587420d02aaba85f487e09b6fe98159aba55a26efccefe48d93665479d8c30805b7922fca7054bff138d7f50822661fabc89b29d36bdcafd05b7442d49cbba1849e1f740c6d50c4a4f49c51c496f014c421395ce458b2c57efd08c8cc3ef87598799335ab8c4404169e5a9a94bb92f286d4a2f1dcb00e20a3c886671bd92001ed2fcedcb72163520358dc947e63361560bc9fa92d84966634a596e734f884c40916212a9fac0b4194ae0e5f06fe66a52ce81834b3ee246feb18ebc6712de38995cff522d55f980c44c69112cb018c3cb8c9f5b8dd53919794cdc311daf817b511e90edd4a3ac27e5033ffface6b8a33209c3fac4f6b00e20a98a4e3d6d8529e86d5138cc9296bc774766c679f9db8c760f0185626e57ecd6f2ff27a7b8d7328160b5266b9a01bed48e61e0ccceda3ab301c98e68f7cc9b55b9fb31c7ec05dcfb857622a9f14f9766ab268bdcd70029dbe10cd2f7edc191152d66474015d1fd606e7ed45b2264970a1df1185eb082f665a1bfc19d5319e0d0d9253ff5db65571a816def6b04c13ff19b1c8bb1b53c44571ae137d6b811bc020b3eb1b42f689f3e76aef010894d08e5f4f7406b6214f9e68d7024138fb98a359e82546a4cf390b09940198a7e5e9c03e191f2b63f479b25441c7d31db9ba76e8428eb96bab8238be0d05d8a6f55a4fb82951bb71a982c3e2f28801ea36041f22536b769762e8799422116e5cf698bf8da1730b3f9358b07addd68f9749694961ea5181a4122dc925d71b2dbe6a4cb20c9bb459504c6b0839e6eeca3e962990db940aca79dd4007876a76b79b52eaad2f6cfa13361cb245942f8bc0686cd7002a9b7852ec39648814f01dcfda39520d993761c46d82a6cb7b610edd12921ad71408339b6eae00351dec3bb69a39e18f35e5875c11b3d5f14a3340b2528cfbe44a8df49d57d6f558d381121fdacc55b0c4bd15afb2330b5e2520c7d369bb6a5f8b58083045bea6d8180c1cbdcd8d0fbf31b472ca0237b1bfdfac85ee48b6069d98b4703b0483f666d2131e8ef4710bcddfc4e6fd2ca1b0e2f54da6236d4d5b8ee55f0096a4067d9bea142d17adf587a8bd20a26274fe081561ac56d55c815683c86967f439132cfe707000bbef2f45be00030d1c83205ed6931b8fe8815001d17fcfad8f4177f18cf138b438f4f10479d4cb9ed936041070a3b716b6229c34e535d450c0eb88ab492aa7ac54e9c4245b76970307f094f0c5882d5644b558f6b12d9bbddd51e0baccd6ddc7c88d3e8f53bd2214f07902594041a6d2cb2363ef3d2ee902061c7f839e48bc6defc74c0356a6a33bb21d5a64b369a0b090ebe3dda887293126fcc2091236027689f9a33c0c2e9cede348751500e40415e1ef5b8a1d4185a3d08057b969d6be93463a5ca5104f517f9b8ec8d97804e5808a0000412c71bae029e3b6a5985dd45ebec83dcbbace5965c6c7e3a4d672ec6566134698e180e2774721adf901a973450ebb3641949cd784dbe8a2c5714038431e65a9a63df08ebc78b815690ce398e426eddb9fb9fad17b2f38c43be48f893aae7f091026cd3042263c1e7da492b52563bccb4bb296b8df8064443926170137439e531d9645d818a71a1e6e269ca35b04aef20b035cd1e51e19ccf8e4a3b5a8066ea6df6af7c7ec9ecdc909d0bac86e6e1e0e011eaa18fc3812dec527bdd47cd64cae4c3df21f0627fb81e279a377609aca4de166ebf8fdaeb9a39d847344df891c047a401462285c9158aa32fd2fbaa01bd0eac002d8e1c5845649039d1770f5d32640ffae43fec7628411bd0916f56b4665b105e9976a926cff04cab915b7b87a328d4702d699ab757ecbccd28f9a22e322f5da9603bc798ee36dd8be3f518db4c1d3da591d02896fef0997946eb7378f716775f2e78be91a78f86e5a99cc4164395a85190b782f35a6601608ac90e893f6b1dd577fa2c7244423ef50e98a71e5134f142bfead08a38142a99617bd1662e4011d9942e4abd768f501322c9bdc64b0d38ac30a6136861b49ea1d67fead077320a43696911292ee39ad97c18e910a42f346e2fae9e7b0ce17efcf6a2966aa70f9c2c4f526f6ccfc577aa709cc15e3c10f1ef299c65f9f646064624b1d5cc7ab6837623952a15eeaa8fbd9cfeaee140b1e09b904eefe3517f491b00af74841d67ce7a2ea061c21c7478b5dc9b7e14f240e482f2abe576476014acd2f9fb15ba63ebbe3f0b9e2208a8fbfd0f861897e7d30476049d43cc1484d349751758bea69e2133bc8a8915239671e8d14e8c737c0ade930d3117f9fb0014632a948848f3fe428ee7ec24002ea8cd3026e02b42f2cd842bfcec6c4752d55dd5295e845b836a7dbeba0da95bb690282d1d92612b0091201ac55bbacb13075d8aa264379a7f47ace6c4e399a0ab20fc97358066da617a9ede478bcdd311082cc62cd353b5c560589ffc28b4e2be9e43ee0f6adc7c9b8073f9aedac41153b12e41e020e6b17fed45bf0e7a7e01c8849142a0a417c0397066fff5ec8206a68cb63b4483df8fc1519b822a53cf1dcfa3fa2762cd133e69e046ef6a911f19e0440fb02be54723f308afa312cc9680af1fa848facb8bbc5d5f6531e0c4d5b4adabd7cdf9ba88d5a693d4320420f58931a4bea4c085748a22b5990673a901b2573e6602572703f2cf8d687709b757e6e947aca6bfa51c2b71c76f6ff782a37cecea76f52ac80f5d725077e467c4845b7d306040ca423ad179c00f0e8fe3a3a74c50096e19910b594178f04e9283ed615b99ec0726667b7b3027983d9d46d6f406ad8086604309a5467e4f16d874fd11164ffe3b5ed4f2a4e9b6a2188acdb2edf6e938a46ae1d10abcac5a0728f9973ba0a4c5500a9de731beb89a756522e2e0b5672667c18a748ef244b3cf690616b0ea406532532e9384bff5bfcb30c8cfdcfe4da0f1caf938bb4d050d9542dafdefde58ef7f4ced448433e4f8d84077c58cc6b566ccfad0980572e1d588c70bdac45f3c6973cba79bc986862e6480f40347087bbfbf53350992f2f12fc7a6d46b1e26cff3439ed53cf533b30f5a23ef2d9e47fef47fa0babbd68f5c86af7b96a4ac24e8e7867c4360f63077c67b81ab9199df5079d6582301e06f9af4cc9919f9c63dbd38dabda50588631f0bfe7faa7ce96270fd169cafaf6e7a73b57f29c247059dd3dea7678b86fc73cbaa4c0245bb50e67325289ae330750f67755d253328697d1e175537cb0cd29bddc61f63e3c5ab42fe2e67b5423866796b9e5e59ffc28e00b1fe5be72765d6099122fb5b36d928b917069206a7e359e41895bcf3e5ab8e7b423caf5ca675d33bc0ffbc7006eb51a00d99cf9f339ec37279a40752be798e1157f706701190d175d9e0cb754a1280501578aef6ab375d1a220959b85011d3eb03a2228d6773727338e19a58c6ee4c62357f1f28e6f82ffee2562227b96fddbeef46ef4a2b761835f58e6773514b5257fbb5e1400518078a05a9cb9b7734c23d9ef43a5ccdae249609a067759acb5005a4c09002c198d415cb9715b5d79066310f17bcbbb8da2036eae3ad02cd3e34ef13c9087076e9f94ceab0111187a0388047b3f06bd4b4a9361f760541c9db74b9868d31e642254e4a8c2b59a2514520452e0554ce31bd698e11a83ca52ff4c93b81385f9ff1cdab5458a7fb6f5847ef78b8526566f84ccd1086301f89a5d3a177b3e6a6902db1327f96c828b507418cf5665ea46d86655d7b0cef0a29359e2ef537bfb990e5a0821628a84ad18bfbfcc1b648ccdc8a2ff753daed3922882c10208bf56c1bc523c07880ce237556b5cda452b4cb0c6d6a2c14f7ba969aed46359324bc41bfe230e8f90b7d56724e15aa8fc16e8089000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/5664], 0x1620) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x9f, 0x0, 0x0, 0x0, 0x0) [ 296.438784][T29835] loop0: detected capacity change from 0 to 4 [ 296.438795][T29828] loop4: detected capacity change from 0 to 4 [ 296.454408][T29835] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.454624][T29828] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.464032][T29795] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.479346][T29813] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200406008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 296.524980][T29828] loop4: detected capacity change from 0 to 4 [ 296.540489][T29835] loop0: detected capacity change from 0 to 4 [ 296.556579][T29835] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200402, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x47) r3 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000300)="69dff031a1d2dfe72abbcbe5de7e55192e65836d785afce2387090fc2a6117965883d547a2bb021e294b2b93c4dcd106820d7a50b396f602a2c423926e99954374208c1816ebee6f503a370cd7cb1d74196bdb85e001d9aefd381fb7eef62e7676497c0cca4054b3b430c4a039540f0dc2c85899b4b6e28928340dc4bf0ff93fc618a7e8f307f35b635df727a705a2", 0x8f, 0x1}], 0x4002, &(0x7f0000000440)={[{@quota='quota'}, {@user_xattr='user_xattr'}, {@grpjquota='grpjquota='}, {@discard='discard'}, {@data_ordered='data=ordered'}, {@barrier='barrier'}, {@nouser_xattr='nouser_xattr'}, {@journal_dev={'journal_dev', 0x3d, 0x1f}}, {@acl='acl'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'proc\x00'}}, {@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_hash='dont_hash'}, {@hash='hash'}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, 'mand\x00'}}]}) ppoll(&(0x7f0000000280)=[{r1, 0xa04}, {r0, 0x1080}, {r2, 0x4a3}, {r0, 0x8612}, {r3, 0x281}], 0x5, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000540)={[0x7f]}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000400)={r6, 0x3, 0x6, @dev}, 0x10) bind(r0, &(0x7f0000000040)=@xdp={0x2c, 0x8, r6, 0x1f}, 0x80) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 02:47:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa0, 0x0, 0x0, 0x0, 0x0) [ 296.573678][T29828] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.591647][T29864] loop5: detected capacity change from 0 to 4 [ 296.638429][T29864] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.653428][T29875] loop3: detected capacity change from 0 to 4 [ 296.666929][T29878] loop0: detected capacity change from 0 to 4 [ 296.669964][T29882] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 02:47:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa1, 0x0, 0x0, 0x0, 0x0) [ 296.679905][T29875] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.690689][T29880] loop4: detected capacity change from 0 to 4 [ 296.723947][T29864] loop5: detected capacity change from 0 to 4 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) fcntl$getown(r1, 0x9) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x24) dup3(r3, r2, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 296.725516][T29878] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.740579][T29864] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.742592][T29880] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.762464][T29875] loop3: detected capacity change from 0 to 4 02:47:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa2, 0x0, 0x0, 0x0, 0x0) [ 296.797468][T29875] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.815025][T29880] loop4: detected capacity change from 0 to 4 [ 296.823807][T29878] loop0: detected capacity change from 0 to 4 02:47:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200007008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x7, 0x4, 0x51, @private1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1, 0x7, 0x0, 0x3}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 296.841436][T29880] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.854220][T29878] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.887646][T29930] loop5: detected capacity change from 0 to 4 02:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa3, 0x0, 0x0, 0x0, 0x0) [ 296.914672][T29941] loop3: detected capacity change from 0 to 4 [ 296.926915][T29930] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.950853][T29941] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 296.984208][T29949] loop4: detected capacity change from 0 to 4 [ 296.996368][T29949] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.010649][T29930] loop5: detected capacity change from 0 to 4 [ 297.013128][T29957] loop0: detected capacity change from 0 to 4 [ 297.025028][T29930] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200009008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) ioctl$FITHAW(r0, 0xc0045878) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/256, 0x100}, {&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f00000006c0)=""/256, 0x100}, {&(0x7f0000000080)=""/4, 0x4}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000500)=""/36, 0x24}], 0x7, 0xd9f, 0x6a8) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa4, 0x0, 0x0, 0x0, 0x0) 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000080)=""/188, 0xbc}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000300)=""/170, 0xaa}], 0x4) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 297.037768][T29957] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.068111][T29949] loop4: detected capacity change from 0 to 4 02:47:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc4}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 297.112385][T29949] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.121892][T29957] loop0: detected capacity change from 0 to 4 [ 297.122279][T29976] loop3: detected capacity change from 0 to 4 02:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa5, 0x0, 0x0, 0x0, 0x0) [ 297.166619][T29976] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.178111][T29957] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa6, 0x0, 0x0, 0x0, 0x0) 02:47:42 executing program 1: r0 = syz_io_uring_complete(0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.216470][T30002] loop5: detected capacity change from 0 to 4 [ 297.241956][T29976] loop3: detected capacity change from 0 to 4 [ 297.248990][T29976] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.258481][T30002] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.267577][T30008] loop4: detected capacity change from 0 to 4 [ 297.296446][T30002] loop5: detected capacity change from 0 to 4 [ 297.305271][T30008] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x4, 0x9, 0x61, 0x6, @time={0xffff0000, 0x1}, {0x8, 0x81}, {0x1, 0x40}, @result={0x1, 0xffffffff}}, {0xbe, 0xc0, 0x7b, 0xff, @time={0x7fff, 0xfffffc00}, {0x3, 0x3}, {0x81, 0x9}, @connect={{0x8, 0x7f}, {0x0, 0x9}}}, {0x0, 0x2, 0xcb, 0xff, @time={0x16d9f0e6, 0x9}, {0x1, 0x5}, {0xc0, 0x3}, @ext={0x1000, &(0x7f0000000300)="567ff83e34afc281520a37c3f0bec56beb7502b97b0e8347606e237317c28a7a0adf52db2bbeac4f0a353e6ec1d999ceaf52700fabfda3913cae7ba071240608aa375e1bd2cd1d872225b18ef5f94da976955835bae79902a1338cd6653ba53ab3a82b561ae74906e41e4996c6ff80280fe5c6a7c94e6036751958369e8d8af9ef882f72829892c5a56f93e52b35528307156e3dc87f0b68513d0ccff8b1c1953789ed0904f064d80a41b7191d0f414982658de02e167f90a981c23eb0e79026aae0bfb89e5d875ba62ddf07dccc1f5c4e07ae92728dd34579ce6e25006b29ddb81425726c9eddd9fc2c7a437c1f954bb2e9f0ceb38ce9bcd0e89f1a6dc69c2e66377b1d006eddd061657a5c0df8da33819b54a6b0c683825a12b3c36fb6d253e7c690b03eaf2c3e44975da2f33952670f91192882b979971d6144bc99b1ca1b51c6d304e7d7e6e8f75ab5dbb306c11bce08294214d01d5017d0d640766d6ae9a100f76698dcf9af2dcfd37a8df2217fb1abde5644a61cb505fb8914e9f2d6f649801202595ca9a46023f5d2e94762587acb5c3ff7f6bb8d9cd9497595c2eedc6c8611c14dd81edfdfe21312cf2e63dc50804fef88559089af62b8bd456e4248354cab8560311c100dfb38dbba08e6ab05e38513d177ec2d01ab99c3d0426bca97006f2199c5a8732357cf7f4449cb2f0003e6943c0c1318269bf4ee9ac8545fa561817eecf4939077e129b56b910ec3c34794eb639f4ab9c168e54064b5aeca4506aa08ad534539cfc484264429cdd9494f7ccf3c6c87826a765ec756a79f0c65d224804495cf8beaafdcb6435c070c3ca0dd3db333260d6acf2d71db6dc7189ac7475ef1d7526f5b4e93c6ff3bd8555ea4ba73751b235a1e5042eb3c186d2c5f04870914f0f626ea436a4bee82c08549ba90be00fdeee653dcc366f7f0500c90d9e72f0d147edeb24e683f6ee36b6471c5bccba9e7dac0136bb8784d746916847cd76ad7d15b75a7f8f87ebcc596512dfcf375d4c168912a6631d6684402d534345508ab643c919d9590c5f922c572e0053e37a1a52efab13027c83106df02b8ed0ceb85a1e41e5addb511fddc12d7c43342af956b843c123a20da9dfcb8b9a482003248ebfbf0e7a06fc20c8412fcd2f3981d958098be083de984916e0786ee6fc2e86d194684afe4b9dbe6ecf351f655a1d80c2d51a07489c94a7cdf8a6d43b8bdddab91048773e52b3a6ab5a048b4ef6ef7247559ac810e12027cd28ebf1cef54f922a15a68f17bf236248f7f7dbd792c0ac38e8813872eff04fcb89d114c1cbf7795e6e5e54008b7776db90c1f14b91bfcff2b6495ae888edeacd9cc0d64692b55a7a2970790e6e5466b6ff41ac263d21b10f3866170300de17192bce0d240fe4dd17e66c8b51f381b1dca9c7da191744cfe67f1d96be70b2688e7ff32f9f1c68c0fc0840ddcc442f6f794e22f8307dc9540162a9480129bfb7f3f24482370b8a3e1b17c92384a15dae383a8bd9c2a96d2aa3518fd9c81644004774fa9fd411532e23ef4bc15d7bd2ece5c9d0789d504fff581316c1fa3d253a33a4b98b377d48dcc9fbdc8819d3e35dc8ba34eb5d7a3217df54bc5f0582590f01880e64e5ef81b4b69ae28700635572c4aabd70f99be9165aa24c5de504249dec39ce54fe2f9709f931972c364e4426004c4dab1295a72abbbf450b56d7a92e434d1a7e65b170dd3519ac0e4414e8e19842f2bb11fdca170cbfcb558d3d1215ed99b531f4a6ce70b071a71a4db7cfb633118059a62fefe4abf64b9a478862f0b6dd62c5688c082617c45a327d4267a0af34c71f7b5bc7073ea809778943d8f6a60ab67ab5a71b4669c8bd28c789157c01691514417e58d644943a6f969207e1ee559dcf2f1324136e6c7b6932c475d63caea2faf3c79b6d71038a5ec3da0ee34ad5f56f496c089a0d99f8b4ad5b5d030b6120fccf62769f951dcd002a178db31944447d0b60aec0c78e63366601b3215021552d9e67b8e9ce427b6665a8bc6c633d09a46d1822baaac2ed3a9982b2935d115923bf1ba069ef0338dfb8dae6122eb7208926f070504af436735e0a8e448857d869754533b822dfe1bcef744cb60a8434b1a0618ff43cb34ee314b09f6b0de5658cc4b543075941ba19fa4df78b40142642259da93e52fa5a4c25ceff3e9188cebe67285bfadc612f42cb6b2d253d601b1da230a64120af2107e5edaa9fe5f7a6eca7e7582a7edfdfc039a5902ea7df663914264b70bca12f8c631853e49bb62fb6d663e30a827c0329d9e53cf4562fce32176c889765c1d146a2f33978317dde25ed12b019fcb6d1f9ee5d0350f54ff357f8499081b75e3141a187b5b5fd952e1716788b422257682b5caa020aa64ac1394ee195ecc91a03d8e23895923643a596f4ad177acdb194e767cebcf64806ac90a107e86a55cb9b42b3ac28bedc63927df369184fb4f7533c05b7198fdc86bcbe48f709fa530566f22044e70150c7f52e5d9977ea96790133f7494e8ba4dc4a63ac6bcf3c38f06de0684e7407c79dbf48e7ccc854fd97f5a123defd428babf7347fd7f58114786f6367b44cc578202b2d0b7c47b2f0ec04ae4508039839ab29ab837658189c15ea2d77f95bd33038290c68f41ae777084b7714c6191ab1fe8b9832de99fadeecbe706c3185dc391d3f499dde63c73f7f396a9a8be9ef72e7e893dcf86929d2b9dfa972f3d914ba0a6434c6512fe525f1cdc7e3b979a41b9b644d2a4a8be9be9db09affc2804ea94945b4f0da5f06e05378d7b2e11be0783ba2ff02fd472504b6763232c4c1c86769036bf317978d7812cbc56a416f420320d0adde9239efde183db93db8d879b121b45b2601d0d83cde6bccaadca14a3e6a6c6246704422ad83a3aab6b9dc9bad0dfff97f5cc5be4f61d026bb4e60a2bee816e649582d1359240b53bba21375aa54056c79b390186106355ed7a47a5749ace1db9e8b6084763fdf295ee473117d9f27fe60d67db16a463fe47b7f74abe7667a5eaa02326dd1c14471461404aa9380bcf2b08ed9665bfe3f79eb9966c34c442ae17a441f946650872f48451bdfd729d4907b3522d7f9b27a095f132270e41043786b01c1ec96457e20e0379e056a4b424ab11d451e55b1c78a802cc6d67e778b5d217961b4c8c1aa1bdaec594d5e56618001b30733dbe6b0548f3615c7085ab10bb593994eebb9647d5d2ff76ce72137f71659e45c3736338a634fb37eb4825af33cbbeea9e240a74df5307ee78de401511f6deb11e4326b1b6973b014a2499e90f167b71b79eab493d2d40d3d0651660a5f5197d20abc50010ac531e00c57125e5383ade31dc8086593beb5db1f4edb3f651675f6fd8763c6629d6017edb802d45a3012b6a1c8369822ef774c39a6bf521b72672ff5d7727840336690568ab53ccaa61ffdeebb51973e286edee36771365dc20710707b0ecc375bdd557b00c56806d35dcefde3eff202aae662a91d2cac7c85f938e4e1bc92f709425003f5d385294b08240b042233cc0608fff3adc1293b8530a124022c34a7b4dbcc3546fa3e886aece9edbb902358584acfc17c9f875ce578bf40a9814826c6d402f85b7e6231a23392f9f7c1235ce38e6cc80a474bcd8bc2defd5b285a3f1120f72330d3045e5682efd85a749dd03b3c177da5b591a898f53f3e45b02ed54226005de70f44ac993165ea48759dc9e33ef311b0a24860345beac18994a3324508f4358ba121afa939238a91222a703f390d25ddb182212fee622881fee1e683923634409cf8ba4885c054012b2e1a63a900f46bf73ee06ace8104240a394ba88fa88bd5331fc1be467d504f945da0aa6d5ae4a30f263e8484b8153dc85b717746cdc9236bd6aebee3db0a3952f2b70bb3d5d0b0e8841402b154123a8e0dcd22c945442e9f3b6d5b19a6f1bb317479b394b2f619d77563ab42d6ac67c4ef367ad92ee014e50a992ec20f04ceda618fc4cc4e4e3a962f7f86b09944b182415013c9fce4536768c53f409b909776f346885e7f4d84b0e4c7659a6ed688bef3d3e5f244723eb17b2541e7d0e8a2c30d4eccaf0d3195ee25ae80f5789c2dc2d8ed7d61f3757ca3ef044ede4e2b78d789e3a12c96d836ecc09f8acb1d65e5bc8b9e2043db56b47eb2e9e84b685cdd15c1c5f3c098879a5aec4a421a907cb40235f35c43b56806ca5ab29e5dec490c899df7f173aee76704982637b53404c415f6fb00c24b12f7776956513b36804bd5fb4ae8c380748885875915eee9a27ca193361d9c0a6085fdb33a2400a01f73d1bc362bf1bcbcb564fd0d747b9a21f07768c057090fb3bb71de48c17a40ba8c69c79a1cdd823c1cb161808267b6e0c151d17ac214d03421cfcf6a77babbad76e54e575913cdaaa57ca2fdf5d0749dbcdc1eb8225493b647b3395fa45f782a66ac075c1eb5c3b101b60e509df1288a69eae9d422dfa758aff82fc7e223ef606d511fcc7bda2a0dbcb8717ac71ddb9953d3069b04a84fc7ab4b3b17227a9377da838cb6ca47c1811c56275bef1779be0d0beb03ebf42e7f96ef07858bb804d8e251cc29224f65661a4f2a8f1e891f65ddafcbd2f0f5b92a9888b4415f5b3fd526ee9636241de828c479a88944b363b87f2dcc8edd1ef7d101713fcfded632eaddaacc06ef1e807667c4ee1df8a504c419ad1d64b5d48d81ffc526ab43e1cbe9b65e18132da1fdb2b2e1b062cd798f8e82e7db4ee0eaa6b5a7e36020646d71f043c418dd2ea7e5811ca5d3c22bdbccf63b84b27120ae57fc49e0e9fe17acd22fdf3155d24cd54aad8dbd26e4928afbefef55e282254d95d8a61c5f3d22ad05e754db6abea0612de1fecf67a6887b68a0e2bea1338668be8d65158db0bb52be731047199ef983f5d478800290a181511c26ce6762b90ec9f032877b6933bff01c711a5ab7b2f935b45dcc8d987af45422abbb3f498b25b4d219f943796d5cb4884d67837d0f97cde00759284f0c6cb12581b27cb67a0f64ac97876380c4ad0040ce30f3b04f65a6922bfdcb81ea7f42e6fd139e184a94869730b2778c7bd4fe115db7a51ee864cbe49687fb5e6087f6800fbd4928e578c4f53a2c3801ae03f9cb547e22b402616f2f3b2f3c860f5e1feea1e6fa266939187b8edfe007c2cbeb40c7f7baee72ed5b1d5136ee5e79b1ced29747f1aceb5c98f62f6bf5e85ee3358849a6e00f6fb789a29a079ce194e99dc74926463cc370954fa1be39ef514428df8631160a47541363fa180383812ff06b4f2eff4be39d4a3d87b1dfb6f029abc7c83e1a76287cbfdba640e8196a6c3a6a076afe7d975a51d5bc8d846fbc5a64c173cb87ab23b523619a9b641a9738f6085b43f298155f5f693b42704ac9afe48ba91e79470e3b9080f2bed342984e5b0d4cb944dfb47de54d7133734749ef583548c93cb057b00a90d65b4196058b4adbb1199a9604918f547d4ad94ab9906d1d7e95e37d46cd91897ed2a58cb501bc68f910fd0fd30a3260a07aef1b5c4238fd896dedd944f9af80306cfde8acd79004fde55c70b2f06f5ae277e23240359b8520bf5b1f5ee90f5be7dfcec361ee61c86024e5c0fa166d21960a38014f06d9d18b520364e4a901b1f5757055bb2e3a545448a236a8af406d44e4162b20634fdfaca4f14c112e4ac7eabea67231ec098b1daac04fc3be4565e8057e1ab660439f3572199edeb53c409514241ceb24fb578024ff1e13e2329887185c2f7d45ac065f74d2fc1c0b23d7f93de321dc1acc0b5a00812255c82bd3187e1"}}], 0x54) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 297.323276][T30002] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa7, 0x0, 0x0, 0x0, 0x0) 02:47:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200410008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.364378][T30008] loop4: detected capacity change from 0 to 4 [ 297.370617][T30037] loop3: detected capacity change from 0 to 4 [ 297.380557][T30040] loop0: detected capacity change from 0 to 4 [ 297.388633][T30037] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200068008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.414250][T30008] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.425082][T30040] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.441287][T30037] loop3: detected capacity change from 0 to 4 02:47:42 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x3, 0x400, 0x4, @dev={0xfe, 0x80, [], 0xb}, @mcast2, 0x40, 0x80, 0x8, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', r0, 0x29, 0x0, 0x10, 0xbf52, 0x4b, @dev={0xfe, 0x80, [], 0x16}, @private0, 0x40, 0x7, 0x7, 0x100}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x59d8, &(0x7f0000000240), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8, r9}}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0xc4) [ 297.463703][T30037] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.484922][T30040] loop0: detected capacity change from 0 to 4 [ 297.491620][T30070] loop5: detected capacity change from 0 to 4 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa8, 0x0, 0x0, 0x0, 0x0) 02:47:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="209e0a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.506574][T30040] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.517917][T30070] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.586465][T30085] loop4: detected capacity change from 0 to 4 [ 297.602425][T30070] loop5: detected capacity change from 0 to 4 [ 297.618623][T30070] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:42 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xa9, 0x0, 0x0, 0x0, 0x0) 02:47:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.632652][T30096] loop3: detected capacity change from 0 to 4 [ 297.649109][T30085] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.662854][T30096] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.676348][T30103] loop0: detected capacity change from 0 to 4 [ 297.700856][T30103] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.718603][T30096] loop3: detected capacity change from 0 to 4 [ 297.725133][T30085] loop4: detected capacity change from 0 to 4 [ 297.733341][T30096] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_b, 0x0, @broadcast, 0x0, 0x0, @broadcast}}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x63}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4010}, 0x4000c) [ 297.743308][T30085] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000b008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200069008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 297.786171][T30122] loop5: detected capacity change from 0 to 4 [ 297.821138][T30122] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xaa, 0x0, 0x0, 0x0, 0x0) [ 297.858582][T30103] loop0: detected capacity change from 0 to 4 [ 297.898014][T30103] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x3000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x802021, &(0x7f0000000140)='proc\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) [ 297.933409][T30142] loop3: detected capacity change from 0 to 4 [ 297.939695][T30144] loop4: detected capacity change from 0 to 4 [ 297.945865][T30122] loop5: detected capacity change from 0 to 4 02:47:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xab, 0x0, 0x0, 0x0, 0x0) [ 297.977655][T30122] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 297.999585][T30144] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.009408][T30142] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x80400, 0x182) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.075759][T30170] loop0: detected capacity change from 0 to 4 [ 298.098756][T30144] loop4: detected capacity change from 0 to 4 [ 298.098738][T30142] loop3: detected capacity change from 0 to 4 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, r1, 0xfc6c4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x9, &(0x7f0000000640)=[{&(0x7f00000000c0)="bef9fb972493afb040", 0x9, 0x8000}, {&(0x7f00000001c0)="4cde4997af6e149acdb92608c371124356f7f7b130da40dfaf5875b953887fc5adb5e83d2340dced98bfe4aba6d70dcab2eb00c10b22a3c84c427ed9bd174fded6ef0ade77df5c000eafe71dd8dfab729248518c7ca4681837a525bd5948f9919fcdd67a1fabbf487d9d80d71d3d06bd37f6162c86423d8245bb9d8f3db6c8ce68c8de50782ded891f15cd2c3ac152b0d0a200fc39eaba0e1b", 0x99, 0xffffffffffff8001}, {&(0x7f0000000300)="aa302fa5b6f56ed9e16c0312c7fa1c94a175a30313c75c341432774b1b929e419117d03c339e533298c7eeb1ed68197bec1d4b394a1e75838b7c4eb9867e979f9fa0cad8adf844c59ff573d508d2ca2d043e02c58b09e288d3571afef4d20152c44c7e9cf0aa110f1eec0e7ebc285c01d2668718b4b129c8cc74eabd124ca6da2de560439272b290fdb1bbb70366c31fc6182411626362a221f5530decae0d4cdb61ea4485718147e1769bdffc5e65f645a43df36d94592e9734292de786a3a41111f7dd6b6031cf976e0540fd7dfa8b2f2b15ffb7db4ebaa89e7b70e8a6d736a073ccad0b3c019fd8c5", 0xea, 0x1000}, {&(0x7f0000000100), 0x0, 0x1}, {&(0x7f0000000400)="ce9c70486f688c45ba973193fb85a8b19662af76062d43e0716d1d7d0ca808eb987ee32f7ace9e28406e328ceb238da347b105e8f90f4d207b4da7e95459591777a594f45469d6deb5e5c30de9fc9ccc189fddbc9673f2dab6ea10e44b7ad21dd4ffceed3f9be18f8453b9083986f3d651", 0x71, 0x4}, {&(0x7f0000000480)="eac6fab74173e3496edcdd3657cc652bbb9ab50fb8a8dab0940914c96541f9c25f0fbf13cd29bcd23745f96aee49207551cbed6d6e050a2bb34d0983d3a1fc8ba27bf7219ea98dbbf7342bdaa7fda5b4b8d7c126ba62f109466d84df7d54d4eb52d78dc3d5eb2320eecbedb36537ae7008029877c0fa6080ac4623d4a69842c31694fa4ebbda5def158309f95a0b90357f8a725f6fb2c62d1c412eb999fbe531aed3cfd7b8b9def0ab27027d4c814cee9fbaebbbfde4c545f256b6da46a754e065c2b3ee2a7b61436b1619cdc74a887a0d056dbcb680931b69287536f450a2c199c401ce", 0xe4, 0x8a}, {&(0x7f0000000580)="41a3227f6ce07fbd2ce7d52f9bf9ea82e1118593971b163d4eb86a216cc8a24bcb4f17201d644ee9da3bd1fa5b45f6b243e9b16505b82a934424296a1a87ac6805e2c39a0c0803d96d1e2fa84017c398f288233bdcd4d0f6425d2429a7200ad597ed7a2893260830bd969c3ab35c88db7a632dcc6c89eaee87d6dcc759b92abaaa3a352fe5493f53d39ddfd7f131b1d22b50d3826a66fb19e2efb48d98f5312182fa2d079c05", 0xa6, 0x2}, {&(0x7f0000000140)="e26eef9fafcd28ec1ecc8d07e6f05b04c7d1", 0x12, 0x7}, {&(0x7f0000000280)="01a65027e430a8a4fd087cac62ee57953a75a58341b5dafc8d11e61b218e71ffb48e02410676756546e61c6e12dfbd8d02a905", 0x33, 0x200}], 0x24400, &(0x7f0000000740)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@sys_immutable='sys_immutable'}], [{@fowner_gt={'fowner>', r4}}, {@fsname={'fsname'}}]}) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xac, 0x0, 0x0, 0x0, 0x0) 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/179, 0xb3}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000001300)=""/195, 0xc3}, {&(0x7f0000001400)=""/183, 0xb7}, {&(0x7f00000014c0)=""/204, 0xcc}], 0x8, 0x40000005, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x3, 0x135001) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001640)='\\^/\x00', &(0x7f0000001680)='-}[\v\x00', 0x0) fsmount(r2, 0x0, 0x79) 02:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20006c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.118398][T30142] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.129705][T30144] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.140452][T30170] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xad, 0x0, 0x0, 0x0, 0x0) [ 298.209685][T30170] loop0: detected capacity change from 0 to 4 [ 298.228437][T30170] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.237997][T30201] loop4: detected capacity change from 0 to 4 [ 298.249564][T30212] loop3: detected capacity change from 0 to 4 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) ftruncate(r2, 0xd379) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200074008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xae, 0x0, 0x0, 0x0, 0x0) [ 298.258163][T30201] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.276590][T30212] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.301889][T30219] loop5: detected capacity change from 0 to 4 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000300)={{r1}, "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"}) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000002300)='trusted.overlay.redirect\x00', &(0x7f0000002340)='./file0\x00', 0x8, 0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000002580)) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000002380)='^\x00', &(0x7f00000023c0)='mand\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000002400)='\x00', &(0x7f0000002440)='\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) write(r2, &(0x7f0000002480)="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", 0xfa) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x2000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x80082407, 0xf04a00) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000040)=""/250, 0xfa}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x3, 0x10001, 0x4) [ 298.346516][T30219] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.370093][T30212] loop3: detected capacity change from 0 to 4 [ 298.379464][T30212] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.400341][T30246] loop0: detected capacity change from 0 to 4 [ 298.422003][T30246] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.429819][T30219] loop5: detected capacity change from 0 to 4 [ 298.434316][T30253] loop4: detected capacity change from 0 to 4 [ 298.447277][T30219] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.459347][T30253] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xaf, 0x0, 0x0, 0x0, 0x0) 02:47:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000d008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x44) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r2 = pidfd_getfd(r0, r0, 0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x121000, 0x120) [ 298.529939][T30253] loop4: detected capacity change from 0 to 4 [ 298.542527][T30246] loop0: detected capacity change from 0 to 4 [ 298.558993][T30246] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200078008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.574469][T30253] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 1: flock(0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffff800, 0x6, &(0x7f0000000500)=[{&(0x7f00000001c0)="9990f5aa24c0fc5b2d01c2e6280b6c94123a8e12c70c2e202aa5fe8119f36dce6e2ee094fa7fcd14ecd328dc04e38ecb1727134a4b39e1d3724f4520b722d42122df233cd79e1461c632a36b6456f57212d657cd7ea446c87c7cec4e4da01f14ab364ce71cda97d5bd61b51ac6aa3efd0ec157ec44dd0302db79b91a47d8dd566e91b30232bea4d508d6b1bd49d52621ba2f39f92496ddc5883f656b465d02d685663e27d22d12875e0be6622a933ae9b4bd7c35e10e45ab6fd36ab833bd6161a29000ac3bb01888350dea09ae9189f207a12a67c1feaa5f6af4", 0xda}, {&(0x7f00000000c0)="7655e6185549297ed581236211290064a5e8d6ccae933483a46984f01f0f5b2364f98f8fa893c818ae680d57f0edb5e1a3f6a0ebe1730c3646783ee5cea06469a2a11a3c67646ed8166003b77b5c5914e9c909a6e5e1c67738488189930e9357d402d6f9e23eefb6f9bd0ee49bc4bc672c8b820f02574a7ca724fd35602eaa05fb5199f79dad168784a3f076ce3a25", 0x8f, 0x9}, {&(0x7f0000000300)="67a4690476b13de33e2f1123fa31b866952ae1054f3443630561aa7c31542391877742e396c360d482fa307e44d441037b13370d35e86915e01249ea6033234905fdc7973fc91323ce9a8482266f2e2861049c2566f610639f5c833962a63eeb693cf3bd8e75898bfa634aa91c9f92e1adca1c6b4438574dafc93a421c56989115eb2a44e539589253b23d2dba39222fa3046d4f59a4de96114465f83d560fa4561ba81031d1c451e86a315a7c148a5b73e37c446f9957d00364ee8e878db8d5ee8fa5d250fe1811082ab527d20d6f45fc855bf890a3c1ffbbe71efbf19f7c2e33590fac172594765e", 0xe9, 0x9c}, {&(0x7f0000000400)="3f8d4d09a2f441e5930d19a526bdd8bb8505bce3e49ca954056797eb9d71d63bcc45085a4009fa66425b6f33128bd9e56f01bc71096485e485e754cf688558b91bae47edb9d2e65952fefd", 0x4b, 0x5}, {&(0x7f0000000480), 0x0, 0x3f}, {&(0x7f00000004c0)="3acbf80666b3e2", 0x7, 0x4}], 0x240400, &(0x7f00000005c0)={[{'proc\x00'}, {'[+'}, {':'}, {'mand\x00'}], [{@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'proc\x00'}}, {@permit_directio='permit_directio'}, {@dont_hash='dont_hash'}, {@euid_gt={'euid>', 0xee00}}, {@fowner_lt={'fowner<', 0xee00}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, 'proc\x00'}}]}) fchmodat(r1, &(0x7f0000000680)='./file0\x00', 0x80) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.620144][T30282] loop3: detected capacity change from 0 to 4 [ 298.623511][T30284] loop5: detected capacity change from 0 to 4 [ 298.639728][T30284] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.657189][T30282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:43 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb0, 0x0, 0x0, 0x0, 0x0) [ 298.666667][T30288] loop4: detected capacity change from 0 to 4 [ 298.684832][T30288] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.695144][T30298] loop1: detected capacity change from 0 to 264192 [ 298.703345][T30305] loop0: detected capacity change from 0 to 4 [ 298.713186][T30282] loop3: detected capacity change from 0 to 4 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb1, 0x0, 0x0, 0x0, 0x0) [ 298.719005][T30284] loop5: detected capacity change from 0 to 4 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)="985e56aa00bccd", 0x7}, {&(0x7f00000000c0)}, {&(0x7f00000001c0)="62839eadfee21b7b4b6fd772ddbbd55ed4563f84ae001737634b415f31a2e8ac7312e698e4987bd54a8d365353f5234395ef5c9dac96a7e1fbb29a75200f73661fe89601a35d17966ee48ba42ed40930af746abe4440dc8f3e7b6d73228ed744a684c16de1ddf190f931e7a453abb65f309fca0091a7ea1c7ec39b5cee7964a5093f75b52dee6e4e86b177cdf124fb779df163df3b035ed2f5fdae409641dcf41f720b7a2b64c081827792418ad98403851c1141612f9ab0412c6b1cace46d", 0xbf}, {&(0x7f0000000300)="ac5238388e42407ac185520e3108d94c90727fd62110fe7c6e8f82207aa73e239ffc8935df3715aff1d7571377ca02fbdb261306d60c4eacd653c40fcfa8ed52bbb47e29b2cb0cee79a850e981687b7d94a0e4cfcaaab14d4ee38b64162d3f9a5bd08f97e3830256c3da0f3333967f1e7e94bea76b38949628cb598f71e52dd8838d69739abc3abd4560efd662910be1daaf8cdb40a3b8e1fb1ccce00ce60d846136702388f37b8263afe131e2149f24490bf19ff119a28ac3ac4096ec6d9bae15db191594970cd7c93d0532e0485462c220d84308cbe8ead413b3029a4e23ec1139148fdb6e88460130fbf6c140f565e1d5282094a3d4d7841a8ce5fc77a0dc9aa29b960a867620c2dd736444346bd3488c0ac9129d7dc6fd8f8c2793296d280aaddb7d1eade382b69eaeefd33dfeab2fc3d723cfbd893858e96f7e0a8b9e2b727d5720adcc03398bc80a8700f9c3b7319c29c944bad13e61e89354c04ec32f0d568f796ea9221610069746cd87cf7466e034133b284bc911b8d616927b3e2bdf081733c34e45b37db702622714723470e2e41373568978f045b3da95c514aa8ed891a7568b139054d9d7a23ee13d4c090f36875aeb3fbde29551c9de562785bc2da36c753ca6d9de16a163da815cf74cc171c0f68f4aa64de94c78980031eb63657ef0da77b0738f02e8bc334ac38eaa5679f11f19e9f5b923bfd23a68c4b7d3c2b319b08dd4bc7cd7c543452c166bdd2c4a85b2884a117db157d8094d74e089757a7817984ff593efb3879f301bd00845b1395013aa91c24de08be4f3af0a265b2898a552351b7ae3c2f3828fa8b06cd4acf2d1eef86e5537ac774d3dec6f0a69d5b80c843592c4b3f6c45d999a54a28d2db08a6d2690a5922611ed0baa6f71f016144b51d83ca169cc4ee094771952f20fee3f12fb1b0741c7d10b15662de8ef0b97df80440221402f35421142a84b72a85b5208d96273df3deecf7e7b991d99a7190a5d420297f2c8855f5d74a6197bd40fa509d3cfa437a51249075ae084b5350b7c304d8f063dc0af0aa4e10b9aef41be939358ab905ce2f5a341ce24c41a7902e59a9c4da59a55a2e7da8c0dc2c461a53353189768bd6eb2b0e0db2c46f641df1dbe60134e82e337205eaf370161b983440083230946f24ed5c21d2d0a1cd58da7d859acc2be43a2cbda5990df4f7bbc3c7a2ab93506c9be6a226b4253076ab678470fbb4cc99cf0acb91134fc1433e755894b322250db89eecac2a5017d0a4c5e6defdc2f5482fa4eecb6da334913e6d2d48a302511e8d6d97fbfe996a912bcbb434c86e311c8c7cbcfcd98ca11b94f51b0bfa6eab495ef8306414fffdaec1705741fe9680b260b759ff3e17952ade342562754bb6e085a019e8953ae31ae985deabd5087a699cd26bb3bcbc369c9a96206a93dd5ba1755741e4e6fe42c97984aa723ad8468fe21d6e18ed834faa2d3ee24587fe2f76334f80f5f493b6631d7e1d92cf6ae092148340dd828edb8b7376f6765adfd9bfb7b37514a129d7f5193faf4731226f20325989851c783840ef4a690ce13d082907e0a90912c5292682c4a1036a690fb490eeb818e496f9d8d1c3ec2598c6ca3a1a63e219a9aaa768c4b80a57fde21d5d77aba099bcaebb3b65b6008feb1290fdf66edfef6dd355be2b93807ef0413e8046a65812f2cbd429be4abb3b2a1be90881604b73fd702a0cac5d48643835ae079f2891e5ae3dd2d8b76842b05c47c8f1c1316200f64d18f66f8351a92c9bd87bce8ef78b7db46bd20eeab5905c4924e78a4e38de923bace00a82aa709ca7e05ef5a67b7c79ae28c88e9a12309968cc256cea0517aab71dc14ad313127ef71ab7cc3926db579c41075d6e0b5a8d12d541c6a4f8eee5ddd23c43468bcf76beabd4b0520195ce402de3ee52653a0046f08e7a76767bd15e2fc86f38f43de74ad25247858969e53f1b4379c8062a89e64ffadfaefc7add43fb07dabdb9fd5a80f4fdbc204ed589bfb63fad14b03c888251323ad3dd737a6e7c0405e33bab5c16f6cb1ab40468ed52cb1181e3362c0250bdca76f8dd1c4823428f8142bbb6ffe6b5a8135d015ec3beb35871f4f1fb865d3356a67bd4bc45c61e779eae373073419fe896b00cdfa42aee57538ccbf4ab8daa65d9567af624d85597adb31f7e0e9d55b164374b026b435741e5158e94df47f13f47361a807c775cfa38d5ec00d71a2b3cdcc6e9333f3fd1ebf57035885e35e7a067d611bc163ab72a8d3c19d062f78c62243268b59b1c6a6cd263a11facc250213bf246e8841119977898c4900256c6d2abd88f63ff21084d07518e7c3c06b115a1d87b7dfd9ba228b1975ac5857a88547e108c7ef9a8df6e8ec12404cd2440bcb13134f00f51b4df7f5c6bf16ee7a2939bc468e9fba2af5b5e7ee02cd854300eabb3cd173e16895dd622f6909512054eb93f01c1a3320c14537d68548dba20c00bf566ab097b2788107c4cefed93babaf24715915af101843daf2e2243143f9657669f6aa309d909eae40bcc45ea1de11c31797db2090213d268fe4999e7a5e721afbb3872854ff39f3d79c6da7d5f9067e92bc8ce4f4014528b863858900bfc7e4ec7df805836416f4719621436a1a63f5f619f70821cb61542dc662987ef06b06d110af1480c64ff7cd43dc78d1155d7a77eb096bcd998218ac95e08de8c33bcb0e02a2b0ce253201a640d7346ce7d4ec8b3c31a4e92ff96cce1e7e85acc4ef9770f625cdbe512a50a90aac37908f10eb2c703402d459331d4866c385f761d0a12303a381b6b0e8452bcc767aab67794351da2564969f315dc5d7076d51ce4edb5a9df159e39d6c20d6ac2e582b7ece05adaf06acfaac49cc0b8d5624ed5f58edfca8fffc7050767694a7a3949df4a5a5bdf8ccd6e1b5afd11101e1cf3b484d9f95db190f48883569e1fee304f8fb934230e7ee725edb1f8913900140dd3f61c4c95618edcc6eeb299bc0989e888a2ac7b1e7bfa6eaf99de3b4bb4ffce9c8b0cba459667c619ca7934b0db037f39434dfb6f7c4e4889f18a8e11a375c8cc688be237eb27e3a7126e0d9ba078240b690aa5e42f69fcf8e7c355a2b2335af726536084da0dc169202ba0ad54df64cce081622caa8eb748b776462a4d7d23aa34f355ab5b1459b4be2bf66498c30f2221e599762f5b4068726012cee8de18b058500fa31b4df8722b9a60a1e2faff298b056a34a387e50cc8a7f61237f7263f691e254ada421f9f2a20f8c217cd14d261b9e7b9b632af226386579612de79588b0e17730d9346cbf18de3b1a53022427db3ebbaf0f3ad18dc00cee2ada8510f9bbeaace07ea0ebdfe3e457126a3cec8c64d21ddf0629060f48de0cc0f1db98ed0194bd5b175c3789a7de9f781af0dbfa8cc7628079f69d9fc23677e4ab2a9665af2f933e2018e4c292f0444ec20c5592441b7aaf62a77f8099df445f430841089a7d2757477a04e682edcc7c6e8e5012675c4fff55c1a778e72f816c6dcce7b8d4d926d1de29b2c38344a83f1da8e8971dc62063217fdf1e648f5547d675f42eed2d5c3913c4d93889cc410423f9c960f2103d2bd59e0f808e87c489a3db74e22f204dc817f6cf7a1d34890d5b0f0174e2be5388af797b2d0feb7650a773321ec73ea21f1c19dbda6b6332f0dbd84f0ecb01bc9c956fd49d1cddb54288a4d1720236dbac09f3d83eae97b81c820604dffe6899b38c794d34acef71ae36579b447a607b1ddc77797c86dc85b0558ed03d92be8c8932f812e65bb9df81485638299921a37c90c27fd208a4355ae8a4262aa8df1781b17ef4044ba680458e9f4cb6560e71939d2e156baa359fdcfecc926ccf4c64e7fe3174a2c937a91b78575700dd0cb5b67cb75e4e0b323d31a461601b988bd1eab667c8ca6b645fe09ba96f70564145d3e25bf106ff3e495dc9172b84d94b6f53d9e252556ee3f76539d26c2f96fa5ddd08ec31113a985c127ff0aa7df852eaf6b38b8247df7fd961e095b251a93c7305ce4bc45eed763403809a9551785fa198d323a101dc9851c0d267ddd40ec633707c1d918d4427fbe5f27a3c81c9a680132a59bf63bd10ba378fe6fc95c252163ed4866bef443811ed7f847eb7e3f5fbde47ce9db2e2ff3eb297ea17811e0aef66be9eb72ac496d332836c7d146754d0b2b6625040dff7ce10e0f99ee21455c096229c5ed8e8a3b8eb827a2cb08974ed78bca33e5e49b6f590b896b993008da87c4435bb1b8069b0c30b5351e3c83f8d2fac195620858317e95b3ac70f4b2bcaf1039a2a5bbab0b222ecf03cb48cd1f0a87a62dc8be5439d8d660b1fc60100a3b6cddec9d4433a6065f489e4d38be6fab39faf641841bb05cadf66a97f571f23c91f664e058c88bff60ac82dd017ca9f9485ad6929ed42bd0b7874c8827ed498b45cad5c2acd1e9c75ba9bc7d0e54bf2080f8b9d201409b09fc0675c6ca1176e970afad4dd97471e1646915ade5316dbc5b750b37bdabb88b861b2a346f5861518f822a9091514ef1a8be6f8e383dba785d6923cd4087ad85bd655df804a4200daa68ea0ffd797145116e5d99c4aae084d106fd10ac75a51ef421ebfa6100492c9ef3620c43bcf664a1f89d34c528d17db75561c16d45feaf81a447cea056bbb1df22cec5ec5bbde008e82646fef62ad7b70f79e75013bf641c138a793c2fd648dd690cd86c085209b59f877ee1366e7a1e84180920cec56d8bd4b8ac1e0419c766afdfe704b7feda92c3f82410a2809d931e730ba69eb685a9f793983115d9d82f076b3686837a08622a4f9a1ceee277197ae03ca0dc484d64726ca5ecb4229faf4409dd8b9711b30906ae455be8c0d22238c41b45d70a9feabf9e2041bc71ba9107caea1f10fbe0952f7041ba5961ee93b992385a167d4c18168bb07a9b64c23a2681f80fc045fcbd613d6a926cb552b3465f15e0f92cfa337137a9bef61ecddd47b5f1543d848d173c1d5a39c0be3d9978ce802c37982fe35370af25642f3d5792d81e0aca8926e649758e43fd61e717f426dcb5694cbbefa2c6479c4b0f9cf18cfcf8718ba2678bcede83007b075213115ee163db615d932128c777cbbe22bd7a35d00fbbcb0612c0e2f52016d70498fc01d84f3636849e4f34fce6dd51a0d745b42ea6a1c0d554adc2ec555010518e4cc0298ac05c50691416bfaa272a5f54f608346056d2a78602bf95644c5f5c8aa5958df94bf3cfb9739e93b74e1552c887292cd3d1c66b3c7d8c9facebb5ba1567aa59ce4ae1a377e1b7a83f03d4b7b9697c4f0a33ddc8e5d4939a0539bbe5bae3f883489ada42032337f78c094635f25094289a62da8153492f2ceb1ca26a32d88f73ad0cc90aa841607cb29b123dbfc4095fe16b3930de52d1a8dcefdc7ca67b6028a5b850468c34317a32640b0c400204244636ae5e2a4d3c8af27ccfe093fe9d997e26aa968967b94f935997a655851d92ae6a4013562055fdf0593965782f3ba3260e5b4caa5a9f934bebc8a62767c1fe33fd163f6cb49623f311a508b0412d04426615dcf8ef26ff0c3b98fdca9b153c21dcda11fff08307e608a138e36d0f28f335b46e7c3eaedda97e13b60c5a9caa35e8168683a197bf4647ebb8614b82cfbb9a576062c005cda576c3d4b1709e30ed484353cdb77bd487117afe22a9962d1b5281424b528a704e37c96b39b4c1842a6a5dd348a16883e04ceb686ec67bd9ffa4f2c540f16960d95cd743720db29e8498ed6e3a18832ac62489a5f751fc63766eb751576a135c3431a21693287", 0x1000}, {&(0x7f0000001300)="bb50da7c99ec3d6e7c6be42af17e51d7320e1df51e6fb71014a9d2849efe1d702a3c1d2a6c1f3104187311f241539da368a3366c6df8b521f869108404d466dbf2541862fe8d390add2e0aa5e34775770b905e2230c227ef2aea685ad49ae9ff4cd919bd772377a139dbc0f198c8907933a6d3328c80ac3942b6ea3294d0ee4ce4bd73f6f33dee47082acb20e32d", 0x8e}, {&(0x7f00000013c0)="ca4d5c8ae8e8c97e8c2fe157a39717c7fbc1e25ac6b1dc5c84211819a29013998bc77e477160ba170cff42ade0683fdfa07450af7eecc9d845400df32bad01e2a0746d7451fd2059fa3ff87e34fabb6102f32dd81164c8f16ecbb2c6780d9764c654fe1b0b22eaadc331f739106a74427ad25eaf41895f0275d0a9bbbbc0ab32db820dfc11acd2d1dc91ed6d7b247f804842afe7ed218237b8d65a7cd9ceea01d5c034313748e228f46f52873f6a503775886486fac6b3e9c3d1c6868e2febdf5b175b79a1b479", 0xc7}, {&(0x7f0000000100)="2ae728aae05ced3432ebdfeaf3ed332952346c7c53a8b57095527058111b9e3312cac2ae357a6809d9916c8540d0", 0x2e}], 0x7) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='map_files\x00') r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 298.741725][T30284] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.755548][T30282] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.767023][T30305] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="207c19008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb2, 0x0, 0x0, 0x0, 0x0) 02:47:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) r3 = getpgid(0xffffffffffffffff) r4 = fork() tkill(r4, 0x31) r5 = fork() tkill(r5, 0x31) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) clone3(&(0x7f0000001300)={0x80200000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x17}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000000100)=""/26, &(0x7f0000000240)=[r2, 0x0, r3, r4, r5, 0xffffffffffffffff, r6], 0x7, {r0}}, 0x58) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) setuid(r8) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.795110][T30288] loop4: detected capacity change from 0 to 4 [ 298.801700][T30288] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.820051][T30305] loop0: detected capacity change from 0 to 4 [ 298.826963][T30305] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.862341][T30343] loop5: detected capacity change from 0 to 4 02:47:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 298.908689][T30343] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.926976][T30361] loop3: detected capacity change from 0 to 4 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb3, 0x0, 0x0, 0x0, 0x0) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x9, 0x3f, 0x6, 0x0, 0x0, 0xd9c, 0x4120, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x18004, 0x4, 0x1, 0x5, 0x400, 0x7f, 0x101}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x5608, &(0x7f0000000080)={0x0, 0x0}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="5e7fb459", 0x4}, {&(0x7f0000000340)="3f6969b80f11fcde89fafd485572ad7aad076ad0641cfb16b6a06af495633bc2dda828df467e7b2afccca495080140912b1537d893a3369e1b515923371c0c6e97ef129faba23e6eef1a944b8fda77c84d696034e5fa98de4e6fb54e9e382e9672219d85b4dfeb39dbf16f67c9a5d3c5166ba8bf6c37978ac3ca02f4e2b28204a1c7e44e5b605caedd53cd98d73619b89d8895b1bb0240ee688aaf387217e2496c09de", 0xa3}, {&(0x7f0000000400)="6cd1613ef571da668e10a0b573b662ba226ce6b17cc4142e58fc54fa2abe6976e68c5168b52401ed8ca333e5e2320c9d834d307a32a439c0e194eba8853f23d68ec631d870eac867c62590de3903d060b0f5056fd15df921536a953f8aaa45738e89952071e362c366cdd56b71df2ba34b95e64640f4e0104b7bc2afd5f65ee88d0bb793c2ba3f", 0x87}, {&(0x7f00000004c0)="0c66a8800fd2", 0x6}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000e6273533552b2116f10600000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRES32], 0xd8, 0x8000}, 0x8000) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0xffffffffffffffff, 0xee00, r6}, 0xc) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 298.952247][T30361] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 298.972555][T30368] loop4: detected capacity change from 0 to 4 [ 298.989040][T30376] ================================================================== [ 298.997141][T30376] BUG: KCSAN: data-race in copy_process / get_task_exe_file [ 299.004432][T30376] [ 299.006756][T30376] write to 0xffff88812b71f0ac of 4 bytes by task 30374 on cpu 0: [ 299.014470][T30376] copy_process+0x631/0x2e20 [ 299.019051][T30376] kernel_clone+0x14b/0x680 [ 299.023541][T30376] __x64_sys_clone+0xb4/0xe0 [ 299.028125][T30376] do_syscall_64+0x34/0x50 [ 299.032521][T30376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.038493][T30376] [ 299.040802][T30376] read to 0xffff88812b71f0ac of 4 bytes by task 30376 on cpu 1: [ 299.048407][T30376] get_task_exe_file+0x44/0x140 [ 299.053243][T30376] proc_exe_link+0x44/0x100 [ 299.057728][T30376] proc_pid_get_link+0x50/0xb0 [ 299.062473][T30376] step_into+0x974/0xec0 [ 299.066874][T30376] path_openat+0xfc8/0x20b0 [ 299.071357][T30376] do_filp_open+0xd9/0x1f0 [ 299.075777][T30376] do_sys_openat2+0xa3/0x250 [ 299.080351][T30376] __x64_sys_openat+0xef/0x110 [ 299.085230][T30376] do_syscall_64+0x34/0x50 [ 299.089627][T30376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.095503][T30376] [ 299.097803][T30376] Reported by Kernel Concurrency Sanitizer on: [ 299.103923][T30376] CPU: 1 PID: 30376 Comm: syz-executor.2 Not tainted 5.12.0-rc7-syzkaller #0 [ 299.112678][T30376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.122713][T30376] ================================================================== 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb4, 0x0, 0x0, 0x0, 0x0) [ 299.153902][T30373] loop0: detected capacity change from 0 to 4 [ 299.153936][T30368] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.169408][T30361] loop3: detected capacity change from 0 to 4 [ 299.178451][T30373] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.183608][T30343] loop5: detected capacity change from 0 to 4 [ 299.194919][T30361] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x20) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x80082407, 0xf04a00) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="a07e99758f7676806bf7911e40845fed814afac180390b0fa697837220d0a03e8034e89a77ff37a92de377b85574ea3be63119f535101da672c35960fbb0072d389831b40534023c3b8c4fe97199a2124427fe913d538005afd174a07648af7eaf77fdced74e9e8f8999153eb4eca668f102a6a27ecd81b5", 0x78}], 0x1) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb5, 0x0, 0x0, 0x0, 0x0) [ 299.204658][T30343] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20000f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 299.284802][T30368] loop4: detected capacity change from 0 to 4 [ 299.291089][T30373] loop0: detected capacity change from 0 to 4 [ 299.299114][T30368] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.309100][T30411] loop5: detected capacity change from 0 to 4 [ 299.325869][T30373] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb6, 0x0, 0x0, 0x0, 0x0) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) dup2(r1, r0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:44 executing program 1: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800003, 0x10, 0xffffffffffffffff, 0x2000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8012}, 0x801) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x4) write(r1, &(0x7f0000000000)="36e156b1266d9ade988349b933391ad18283060eb69b4b8abbe94cd683950df43bd2f7e560005cbfb8812117ab9455fa9c0619a2cc7316b11b23ab0800e338996bdf37ddf45f9feb566195437c3985d3c198420218108920", 0x58) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 299.363158][T30411] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.380910][T30427] loop3: detected capacity change from 0 to 4 02:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000fe008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb7, 0x0, 0x0, 0x0, 0x0) [ 299.425607][T30427] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.439116][T30411] loop5: detected capacity change from 0 to 4 [ 299.448569][T30411] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb8, 0x0, 0x0, 0x0, 0x0) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 299.476419][T30452] loop4: detected capacity change from 0 to 4 [ 299.482917][T30453] loop0: detected capacity change from 0 to 4 [ 299.494415][T30453] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.506712][T30452] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xb9, 0x0, 0x0, 0x0, 0x0) [ 299.552851][T30427] loop3: detected capacity change from 0 to 4 [ 299.559433][T30453] loop0: detected capacity change from 0 to 4 [ 299.566924][T30427] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.579565][T30452] loop4: detected capacity change from 0 to 4 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x80082407, 0xf04a00) mmap(&(0x7f00001ce000/0x6000)=nil, 0x6000, 0x2, 0x10, r5, 0x70ec3000) setreuid(0x0, r4) r6 = getegid() fchown(r0, r4, r6) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200410008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xba, 0x0, 0x0, 0x0, 0x0) [ 299.597006][T30453] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.613749][T30452] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200004028000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x140) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/108, 0x6c}], 0x2, &(0x7f00000003c0)=""/236, 0xec}, 0x40000040) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='\'\x00', &(0x7f00000000c0)='mand\x00', 0x0) clock_gettime(0x0, &(0x7f0000002d80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002d00)=[{{&(0x7f0000000500)=@x25, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/208, 0xd0}, {&(0x7f0000001780)=""/232, 0xe8}, {&(0x7f0000001880)=""/40, 0x28}], 0x6, &(0x7f0000001940)=""/54, 0x36}, 0x4}, {{&(0x7f0000001980)=@ieee802154, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001a00)=""/136, 0x88}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/15, 0xf}, {&(0x7f0000002b00)=""/8, 0x8}, {&(0x7f0000002b40)=""/20, 0x14}], 0x5, &(0x7f0000002c00)=""/207, 0xcf}, 0x511}], 0x2, 0x40000000, &(0x7f0000002dc0)={r4, r5+60000000}) r6 = openat$cgroup_subtree(r3, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000140)) [ 299.668353][T30492] loop5: detected capacity change from 0 to 4 [ 299.686190][T30492] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.706777][T30506] loop0: detected capacity change from 0 to 4 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xbb, 0x0, 0x0, 0x0, 0x0) [ 299.729830][T30506] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.742586][T30492] loop5: detected capacity change from 0 to 4 [ 299.756465][T30515] loop4: detected capacity change from 0 to 4 [ 299.766344][T30492] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) sendfile(r0, r1, &(0x7f0000000040)=0x7, 0x100000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x4d9f, 0x0) r2 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsmount(r3, 0x0, 0x748fd1b500988cee) 02:47:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 299.776085][T30524] loop3: detected capacity change from 0 to 4 [ 299.798862][T30524] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.813584][T30515] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xbc, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 299.882185][T30515] loop4: detected capacity change from 0 to 4 [ 299.890905][T30524] loop3: detected capacity change from 0 to 4 [ 299.897672][T30515] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 299.908698][T30524] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='attr/keycreate\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, &(0x7f00000000c0)=0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x5, &(0x7f0000000240)='posixacl\x00', 0x0, 0x0) 02:47:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="202010008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000038000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xbd, 0x0, 0x0, 0x0, 0x0) [ 299.932339][T30549] loop0: detected capacity change from 0 to 4 [ 299.973910][T30570] loop5: detected capacity change from 0 to 4 [ 299.998279][T30549] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.008005][T30583] loop3: detected capacity change from 0 to 4 02:47:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200011008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xbe, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000240)=""/81, 0x51}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/26, 0x1a}], 0x7}, 0x1}, {{&(0x7f00000004c0)=@nl, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x6}, 0xfffffffe}, {{&(0x7f0000001940)=@can, 0x80, &(0x7f0000002e40)=[{&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/193, 0xc1}, {&(0x7f0000001b80)=""/188, 0xbc}, {&(0x7f0000001c40)=""/105, 0x69}, {&(0x7f0000001cc0)=""/214, 0xd6}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/88, 0x58}], 0x7}, 0x9}, {{&(0x7f0000002ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f40)=""/225, 0xe1}, {&(0x7f0000003040)=""/58, 0x3a}], 0x2, &(0x7f00000030c0)=""/2, 0x2}, 0xfff}, {{&(0x7f0000003100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003180)=""/91, 0x5b}, {&(0x7f0000003200)=""/63, 0x3f}, {&(0x7f0000003240)=""/152, 0x98}], 0x3, &(0x7f0000003340)=""/25, 0x19}, 0x5}, {{&(0x7f0000003380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003400)=""/78, 0x4e}, {&(0x7f0000003480)=""/220, 0xdc}], 0x2, &(0x7f00000035c0)=""/235, 0xeb}, 0x51ca}, {{&(0x7f00000036c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003740)=""/69, 0x45}], 0x1, &(0x7f0000003800)=""/247, 0xf7}, 0x1}, {{&(0x7f0000003900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003980)=""/74, 0x4a}, {&(0x7f0000003a00)=""/42, 0x2a}], 0x2, &(0x7f0000003a80)=""/22, 0x16}, 0xb942}], 0x8, 0x10120, &(0x7f0000003cc0)) eventfd(0x6) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xffffe000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 300.016522][T30583] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.050038][T30570] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.060338][T30588] loop4: detected capacity change from 0 to 4 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4097, 0x1000}], 0x50, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 300.080592][T30588] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.094644][T30570] loop5: detected capacity change from 0 to 4 [ 300.095336][T30549] loop0: detected capacity change from 0 to 4 [ 300.112470][T30570] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.163615][T30588] loop4: detected capacity change from 0 to 4 [ 300.171707][T30588] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.186223][T30549] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.196204][T30618] loop3: detected capacity change from 0 to 4 02:47:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xbf, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @phonet={0x23, 0x6, 0x0, 0x1}, @isdn={0x22, 0xf4, 0x8, 0x8a, 0x1}, @nfc={0x27, 0x0, 0x2, 0x1}, 0xffff, 0x0, 0x0, 0x0, 0x59, &(0x7f0000000040)='netpci0\x00', 0x101, 0x10001, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000100)={[0xdb19]}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200002048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 300.207005][T30618] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.267149][T30637] loop5: detected capacity change from 0 to 4 [ 300.267351][T30618] loop3: detected capacity change from 0 to 4 [ 300.282807][T30618] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200012008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000362000/0x4000)=nil, 0x4000, 0x3, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x5) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 300.309057][T30637] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.337874][T30653] loop4: detected capacity change from 0 to 4 [ 300.344150][T30654] loop0: detected capacity change from 0 to 4 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc0, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x34ac000) syz_io_uring_setup(0x2b0e, &(0x7f0000000040)={0x0, 0x65cb, 0x4, 0x3, 0x1b, 0x0, r0}, &(0x7f000075f000/0x1000)=nil, &(0x7f00001ac000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) preadv(r0, &(0x7f0000000280), 0x0, 0xd9e, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='proc\x00', &(0x7f00000001c0)='mand\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 300.355045][T30654] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.377106][T30653] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.386514][T30637] loop5: detected capacity change from 0 to 4 02:47:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200062008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x5089f43e68a305b2, 0x40000d9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/215, 0xd7}], 0x1, 0x6, 0x70425c6b) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x2, 0x810, r0, 0xa7fdd000) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc1, 0x0, 0x0, 0x0, 0x0) [ 300.405556][T30637] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.413278][T30671] loop3: detected capacity change from 0 to 4 [ 300.425001][T30671] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 300.470520][T30671] loop3: detected capacity change from 0 to 4 [ 300.476258][T30653] loop4: detected capacity change from 0 to 4 [ 300.488880][T30671] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.508480][T30705] loop0: detected capacity change from 0 to 4 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc2, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/168, &(0x7f0000000100)=0xa8) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) set_mempolicy(0x2, &(0x7f00000001c0)=0x200000000009, 0x48) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x3, 0x6, @dev}, 0x10) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6, @random="0e0b8177f057"}, 0x10) r6 = fsopen(&(0x7f0000000180)='anon_inodefs\x00', 0x0) write$binfmt_misc(r6, &(0x7f0000000140)={'syz1', "39c185a10cd7c5656240f06472a6136bac"}, 0x15) fsconfig$FSCONFIG_SET_FLAG(r6, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 300.518333][T30653] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.537624][T30708] loop5: detected capacity change from 0 to 4 [ 300.552539][T30705] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc3, 0x0, 0x0, 0x0, 0x0) [ 300.571669][T30708] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000002700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x23ec, 0x15, 0x800, 0x70bd27, 0x25dfdbfc, {0x25, 0xce}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "1b914b828e69b8b77f7acae7f1ef44dab2fdd98ac9f6816dad3bbcf52d96e077c0a0e2c02c020fd8692ea8ccbd8cd7798a64651d9a4e1a8352048a0a7d6397dde184a63a8a2f2943520099bd1bff4eab790e55f8e6d8621f8026c330dd5740e6e1a576a7ab80ae6a7917907ca2d49b7431d4b38eb4d75e782cbe6bff998f9d9eef628c9715d76537a6da4d5a625bace1fd88addf097c3a334eeaee9cb2ba8ce3c29bceaef7694737dd5a0024155f30006afd061426da70b28bb7daccee7e5257ba93b071cb3a12fd8998b1"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "0cf0ade1288a467c66856573063afb2d53ef3520c482c9b019e0b6abd296efc2a5795cb84f5fec41768473d25407b8520c4fbd1dee051fb798373779c72e25cbd495cb48f3270f90814b81117af05d706e3e3dacc7b13e6df987fc99eb2347cfffb32ea875000bb4f4a4984836e9ba94c570e07f3119fa242dceca2f7fff039d92345923c9f2ae8a76faca0db7bc6bf010f6246383d9e45eb3b778463bdd25c9c7a166e3a7bfe5f51c5b34fbfd776cfb2db88d6e763b90feda4f34705065929cd8b0092db54a8f3e59970514b43e002deb76d9adfea85c32a0c242699c77f6417211019dd28a699be4f34313fac3530b9483f24aa2899066ae5582cd87d9ead56b93456219323f5a75c18c946656b6f0c3108fa6127e42a1587e86652bc321bef1f31ff586eb971b5f1a49f74cce884b6729c2b80c58772ff05a67d5ed85e864d4908840130b7afceff7a519f7ca42ad438e91484ff32a4de800e3edcfcdd3387eaa309968769525a283a64a9278843ee26c223c9301e917d4de3a6b0429cdabb697bd20dd83f8eb9052a698104b1a94e914c3c3db817228545decba51926e69c99bc01ae4f186201aa9e50f27b39dc5ab87cd69f37f28139ee818c0d37601d1604b53db88f98e9588e4cc98072e471643133a3856f89d8fd717b3056360b70f82e35db20f1e2883f5d1a09aaa82589bb81abd824c3d04812c619518af6ef428be2237caa91ab54fd2aeef126a26c94c6103a91cc751d81aa8d024e74047533e9da3190ce145cc2d90f53040f20f85bc8da0ea893dbec8f11b8430a8274d3985517b4f9c29bfe42e09bc49e62744407c14465cc353109513ad531db598c3ff4f9ef070b9d2957090d24e73e928cafa2728b3caf41b3227af05592f78e1813a29b83e25719c7f42609b48b08e73bc7cd9fb74b5ac26fc3a9023c8cc6dc73516ef2ab55db6eaeb12f473d56f67aaaf02dda7074887cc235e7fa71743d0326e829d78d930436afe331db837304faa8e0ac64141ca84f5831ebb6352134b970bccd94b9c36042b0582148aa2246bc2ce50c806a747e08bf47cdc3a6e17db78cf4c203c1ffe6441313220dd615d928f1b6a21e14b90ad0639198f9e061e3f78fdc3a2fc6b305e66568f32b2aee4d92541753fb4775017b53d786defd35eccb7e850f8ce8e3ebd14a75aade45e972a6c7b58cd0844c6f226ba2692848c8ad0bf1119ab0f59a875f5936b0ad439e8830b4eb3c25f2d9782371437c80f58b39ead4a89ec1b47a951e0b34d86ca4e507c4769cda1527af732c913af32ba031d9e145c20516a83b5c8b7a1f82987c9e1c4370ae2597ebbfdadaa1538faf457c33e347ee78087d7a1b0fd614800024d62d548b7ac640a9b16c344531608fbf2a23579773ac05eff62a807ed6faf0e0aeb2397b2a0b5ed0e6012859d2dd772775d76fe31371a63c6c12cd2111497851f7e3e8f1694f8a80988f1e36a45d109f621300890edcb6c342719a794cfa2746a9f266dbf1406b537a4875604e6674966b34839dd51f823112a6035ddc06e3e8f6e084f108308128b118afa1828860e7976469960a316ef400f6f0ddc09f841749ef4f7885e7baeb87670c7ceae13daf92129cb5f8d5165783a78c80442c8bd3f98a5ae3206178d06d0e60fa8a4690afaf777c980ef1f1ca21721f1ae42b9ef03e945e354d83598c74708d94cb5a67da47e79873759804aee75cf431aa50b486741eb092fa50f3452ccbde324104d5a32c6435683e164a32f0cb34387b3b150ac8116f2f651353513ab88a4427d9277db77b359ada1ca6a4bc54afe9792a1ace1de0725000edf22ac4d8d4f3090bcafc9f0b1ad11b30dd2d84cf3ef1687fe083a46ccbf13572e0c36b81c9dc65033f487b6363139985fa3ec3bd08dd918710a6ed1751689a5579f6bf2b554b2bafbdd566be6d79b30bf2810ef53bc2d3806e76c0b05620381846180ee15a9266ca8ff5fb317f2ba2a5be7df17dcc7560160c1bfd2476b409f42c9b690efb64171329b1c0b508dfe2ad4a6cbc3e48d6a5688c7a22563f3224df863e3943ddb1840c7457ad4a857fd00e88e413d3d9c445689e066278ac83af9b8aee170ade47ae2b563fc06ee35921bc157dda4ac7031abdb9caaae0dad242434df9a62d6c7f2ba6eb46e4b95721348bcb9eadb622a9d6c055b599fafbd3c071f8667f86f5f379286f96f1f13850d8196b7c35d4bef9831930a119e39685976bea8e89c9147051f83f1ab6fc044f9d4b52e6edec00a0c755f3de0ab4de8d1ef866e03fec16ebab08ae867e4cfa74ea3091e6097c4c6694a401b5b95fafc6c94d8c9b102d3bd02fe42fc099c14964fcfedb8899996aa78c8e0129e8521d606c0df928b676ee1adbe4ac675070b24bc38c354f317c6cd76afb0c109245b6111073d60b756bdfcb6f065023ee8bec496393d387352a11ae510823be46fcb31b579afa105b1040b4a5831830290f3e9558c5f31e95a39b12642a0f4fca2b5203caaa9c727c3b455149ab5d59422788e9c4341d6f6bb53840aacaa729eb42eea4b48e08300f3b5afdf44e9a9dad327e616bd510dfb373b8a0542daee3a5b29422b1db5e98480407000e68bc6d055f5bc49be19eeb49ce018fbb76f3072c161b6962f09c8d9f78302889fed3ab49304fb8a9c59d1344efc58005c5d6bc76e0ad0b62dc5b56bede7f55725f9090c0c420cb07966b116a4f2ea4400077c42d55c28ed7edb2471a5365cfbabbd68c9d5b75b6e6664cbce5cf447f91ec8b998eb1e94ca14d72e46a86b7887728d062deffcf792d12f4e500a12eb35bcd8d10e434bc2451b9bbe2788fbc8868d10e1effc61865b11608fb8e2785a0dab1af05549fb3389975516c1d8107a2358debd004d30b34b1150748a0c511eac9d6257faf8159adc94a6246a34976cc5d2f12446460b2ceb33d722c03d8ff905692450d1649b62e0cf6b337ea91bb66dbaa6d6f52891bc5eec74938e31f1721bdb823574de0219e17d9eb3508b64d3d2696cde7b083375ff52e8f3a43c21216e8dfa46da64504102a922c1c9a4ae33ea8655cc8bdaf418524de58912b7dd8026eb2f0ba745759b826f224e4ea7ebf809c7f1b2ec021956fca3ac4a0331b043d25ae89d1317be884af5d567ca8fcaaff883072f9e67926c38d43338c60b6fd4c3c78de89b28ec688b6b9ae05023c714e977b9e16e22da9b9133d42457bd33749167a0ae6711d268473ba3ecf626c3261957718ff7606eb86c4ceb482d88a68729d31ae7e15cae41bb887107ca4809080f119fa040b9bcacd419cd19760c4f7c7c470dd6931278c1a59ad4dcd4c549da5236ec27e0c54ef1ee4001558eb75a42f90dafa379aa49cd6607b39b564287050cd1b01658ed6c9f5c2254946fa4106e7f7cdb0b92aaf37ebddfd6e8e65aeb00655837d51a014b67fe54b71ef8052eb376c5759028b41c1f35073669095327dd66b1b100609c02bf5a9c5dd7eb2ec0e6af79f764734db9af85066c8642873338e2c0949d3118124824a4c609b5c7e8ca0b55efce9ea938489afe8a9f26ad00c6fabcd199f5de359de2f11cb085420d0c15f0f4fbb6ca4bc7196d5845c98e1a2e1f4ecf69841e6c41ceab077248ea6dbc45e111097a15f539cd447a32f199002dfab7da48d7de534112ebd6c212dd333ec4e7e2ade48c7b02c76fd8f5a272d4d50a8d29fdd2f498d3d205298cbe4c1f56856c274170dcf8d8894456c32d9e317e9ad7caaff0a95e94deb67b3ea8a86133a26f29ab0f6d8849340346bec90710d54071a022529ed6deb2940297257653f1698aa80939b6642b376a8735c714bb9b6e1c9c6bb8b9707a0ba99ac59bfbc543b8e8e726de62b5e33df850ad624f0192501c57736ca7c3b8026df910c263a8a2c5dd066f02825915f2476690ad63fad35161227aa992c18a9580879d56032e26b229c878df6a7ab80c04406a58703a17d306a3e0fed021476ac6b85c777ad2ed8808ece28042a7b736a412d201129966404c11af710d822d0d007d413d606ec3f5879f7671c347dfacaccc26e5daf21db67dc850d0be270d369b9330b2d6e6653daa3c910ea55cdf0f76f21fb3817339aef7fb1ea1df956524758d844bd3265b52b5beac0b9fea191d50be4686b1b07044420f6a64cb195c63011dbdca18848d1d4e473435ca607b798671d65c6e50a62756b189ce88a7526c39bf15ed2256b5a91dbf15150186d682bf45f1082200d21569ff3f134b021206918dbf5172be810f2c28ea1d60268098d956e06bad640dfafdb221714de95769a9665f96dc177198c6f24a2fc5b2f792cce991f07ee094d863292815e129d45469db2c991857ea90cb6b162eb780a64dd74cfae3abb2b4ad1da51dfb938bcc5bfdadc899eadda5bc2f1bb059aa561d2b979fa3ef3e276880c6219454a6612ad1c95d5169f3e6070eaa797f1b1b86417a8ee15dbecd0406b40c13c0b07be62b8b17e83a0a213eb81abf017634961862a99fa77e1d4c0120122cfd958b5fe0fc04f312d023baf0755826f0f4f6e0cde1cb3bf6c0309fee8e1a474c1a28ce9d3281a2132f237cc5d5124f972266c7603097c2fcecb41fa0f18c73cdb0be7496658dfdfded9a6955a3413f140ead9c9436164d4f57c76148fff2b04f7a89f33ed8159a707c56bf9fce98a306ecd7d57921c1f1df2d735177868d3532aa03a040bda02d91848cb6c2997dc08a088bcbc566cda4173e7c9baba807e83ed8bef170831447e70f5d8c4d7891b48da7a054a87e14c28d5b2b94bd2e07deaac4421a34ec9db334f6a61d65da91493f01ffce5e6d2e1234b6c2a30aba0eb18a77503c63f10832eb58d791ba8d0ea1ef940358331ccf9de9ea4da4877e052c6f7284b7c4266326e0e5df8b10f7a8b2a36f59d23e8da9d01af8ab16d7a6f32077c0b31eed047d5e6ba99616042b3856d85bbf85adada974c2c6b196b573cc0e6e3801fb2c85a5244748c0db7af3a74b20d850a98eb3b54b44849e4bda9ae651aa78dac7f8f737330a1a6f4bee654e3ae48444e96fb75f8670cdeaa665c724492dd5757e28e55a8106cd50ca0620a34d4a48ac8a77c27de51f9aa78d88d8027cff9e538dddcbf85b6469b13a1cbad42fd25c38e471085c6a2753bdc29a487544d5fef589ac12287a212437430556f5f928da8af411c6b88744257587b13d3ebb7155e229a3b3d70a3ecdce198d9b8679c8b82fd1e2b1c8542dcf04894567abb4bfea288f248e1a7d6582d42a4943ae20dcc81cdad4f0bd03cad02307f390bdca47f815bbfc1056072283eb911de6516da092dc3a6068935ebb2a769b1cb9384c1688d7a6b139c492afcde8f04fd032ce85a2cf1a5dd6244da36494c2fc8d1fa5e1ab3731a693a7c81c683f8fc132c1d645a158a8a8c3322ef33bb95ed909ad9b550c52e11cf15a73b69349af7c7716bb6b939cd5afbfa8576ebbecf1bc939470fe09bc43ef04c07bd3b903fd30ca17168bac3ae8c4f31847b22bcaf93a0e6a24a95b5076bc86a2cce67e125c9032eb7c31acd36eab6e0308a79475afc9928b27a42c7acbb2b2f44a0cd1db37202efdc8c3fd20a88f7158ef49ba6979c29483c55186aa9f54f7f9b0648a5b5202d71b385b5f3fd00d3851a8d891169159512259e41fe351c671a3f2f971ed88e185dafdcb46c774282b228bbde427f64c2c97dce5f1ce402b689b7eb793bb31282a5a27e11ae00ac280d6ad7cfc716f6e54fca240095a9440c1fd053283efa4b9a53fc3143a7e76be5064c2c0c77e1635b5533897f8bf46ac25229dd7"}, @INET_DIAG_REQ_BYTECODE={0x63, 0x1, "85f61492008fc5651d3a672aff23498684f46d8ec95a54e4ef9f2e9667e463deb4494eb24af7a55005ff7205dd97161bc18f667332dffb2723622277b95f88494ea8ed44bf2e1c0d1399d1257723b57b1951a62afc5306ef09d5f85f7ccf6c"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "8e2f9813e5b35e641023abfd66178bfe7487ccbc58faf5853397c356218a6a1ba7b0622003224df69a771cf13651e8ebe336b272cc10d41be74e4b4a336e13f4187ff8e8176ff89ec61f414b52ae6f6a27003661598cfeb491d2a5609514c2b1f2f4bdc84dbb1d0098d4de191209a90599dcfd3c2f5127bbb31d74d86a5de32e84fdc4c7d5568ae335776f87bc2af57a8615578646ab599bfd8722f3cb74321fae3f84dec74e256e77c15e760ecdbb4339535714ea225779cf56170b27c487ec9f7fa2875333f192f40409bf60817f58dd9e6d6d6d3f01c61058ed6062e80e1cf6122a1b5e1b8050c30c239e5bfbcf60b0"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "a1ef3971e7acee7cdabcfb5d5dc5c1e91b1064dddee02c94a6f64eaa6bcde8b08f2e283a37aaa1ff4ff28ccf7fe823f42f949ebb6db2710027a24a7d499f167ede2886f44d9d0abf9459e63e5a0642bf9dae7376ef77ad3ac6a70cca04b9f3a719cdc3e805497356ffdc80f07f1bc206c0491597f7e63fb416a8eba52153a90d1f"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "dab73dea84d6cd46e2800dd57659f74eafa9a027f0be39c2df6c690f743bcd839e1ea5a9a1156a6da2a5c7956407e499b45e8749bd3b71827f4e99d1e93f91eed77dc31000d4115c91c6cecbf858148158c7"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "d8aa3834c71dfadef73ea942612d34eb55367b63918459222ebb4119b001a5b0d9096222921ab3edfc5e2615a7c92bd1e2a5eb75be66553ab7d72fa0ebfc8c5b28cd7f"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "8b4c4753aaddd2c648a649e9c99e1ed3df4a19b031a160dc54b7deed645af7302f43af5d171bc48da293a49f45f4c807139a48f0135266be8f0a8f4ae5412e9fc8f63f1fafb81757b73d79c14f1cd471ca87a93d487a10483a580d6cb881515b5bc70b0ca943a0a0a897f4a6438c613dbdedf05c51e6a1"}]}, 0x23ec}, 0x1, 0x0, 0x0, 0x8080}, 0x48c0) r3 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x358a131c7cd2f9e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x31, 0x2}, 0x0, 0x3, 0x0, 0x2, 0x0, 0x10}, 0x0, 0x800000000000, 0xffffffffffffffff, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x80082407, 0xf04a00) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='proc\x00', &(0x7f00000001c0)='mand\x00', 0x0) r4 = fork() tkill(r4, 0x16) r5 = fsmount(r1, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x6, 0x7, 0x17, 0x3, 0x0, 0x1ff, 0x32400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x7, @perf_config_ext={0x87d0, 0x5}, 0x4, 0x9, 0x4, 0x1, 0x0, 0x0, 0x5}, r4, 0x8, r5, 0xa) mmap(&(0x7f0000091000/0x4000)=nil, 0x4000, 0x0, 0x2010, r3, 0x83ec2000) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsmount(r1, 0x0, 0x70) 02:47:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc4, 0x0, 0x0, 0x0, 0x0) [ 300.647589][T30705] loop0: detected capacity change from 0 to 4 [ 300.662822][T30705] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.663940][T30708] loop5: detected capacity change from 0 to 4 [ 300.681162][T30708] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20003f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200063008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x80082407, 0xf04a00) signalfd4(r1, &(0x7f0000000040)={[0xfff0000000]}, 0x8, 0x80800) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc5, 0x0, 0x0, 0x0, 0x0) [ 300.728441][T30731] loop3: detected capacity change from 0 to 4 [ 300.734629][T30746] loop4: detected capacity change from 0 to 4 [ 300.746780][T30746] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.756701][T30731] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc6, 0x0, 0x0, 0x0, 0x0) [ 300.813524][T30760] loop5: detected capacity change from 0 to 4 [ 300.848398][T30760] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.856571][T30746] loop4: detected capacity change from 0 to 4 02:47:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="201020008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') 02:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200010048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 300.866258][T30746] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.875922][T30731] loop3: detected capacity change from 0 to 4 [ 300.882088][T30773] loop0: detected capacity change from 0 to 4 [ 300.893041][T30731] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.899319][T30773] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc7, 0x0, 0x0, 0x0, 0x0) [ 300.957200][T30760] loop5: detected capacity change from 0 to 4 [ 300.957200][T30773] loop0: detected capacity change from 0 to 4 [ 300.970539][T30773] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 300.981402][T30804] loop3: detected capacity change from 0 to 4 [ 300.990290][T30809] loop4: detected capacity change from 0 to 4 [ 300.993056][T30804] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) 02:47:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200068008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 301.007261][T30809] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.018387][T30760] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc8, 0x0, 0x0, 0x0, 0x0) 02:47:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200040008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xc9, 0x0, 0x0, 0x0, 0x0) 02:47:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00005a8000/0x1000)=nil, 0x1000, 0x1800003, 0x112011, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) [ 301.105096][T30809] loop4: detected capacity change from 0 to 4 [ 301.114833][T30804] loop3: detected capacity change from 0 to 4 [ 301.123412][T30804] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.134239][T30809] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.145741][T30841] loop0: detected capacity change from 0 to 4 02:47:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200022008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000058000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 301.198767][T30849] loop5: detected capacity change from 0 to 4 [ 301.211315][T30849] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.223109][T30841] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0xdd7}, {{0x0, 0x0, 0x0}, 0x8002}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000002, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000007c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x41395563) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000800)="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", 0x14d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000, 0x0, 0x6, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x9) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000600)=0xda9, 0x4) r5 = perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x1, 0x20, 0x0, 0x0, 0x0, 0xfd, 0x2a1a9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x566}, 0x0, 0x7fffffff, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x1) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x10000020, 0x9, 0x0, 0x5, 0x2, 0x5, 0x3, 0x1}, 0x0) writev(r5, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9", 0x89}, {&(0x7f0000000340)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a", 0x8c}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967480241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xca, 0x0, 0x0, 0x0, 0x0) [ 301.262872][T30863] loop4: detected capacity change from 0 to 4 [ 301.286743][T30865] loop3: detected capacity change from 0 to 4 [ 301.294963][T30863] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.304630][T30849] loop5: detected capacity change from 0 to 4 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xcb, 0x0, 0x0, 0x0, 0x0) [ 301.315149][T30841] loop0: detected capacity change from 0 to 4 [ 301.323235][T30849] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.332870][T30865] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.343020][T30841] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.359413][T30863] loop4: detected capacity change from 0 to 4 02:47:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20006c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 301.397343][T30863] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.420668][T30865] loop3: detected capacity change from 0 to 4 [ 301.433721][T30865] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000068000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 301.443393][T30906] loop5: detected capacity change from 0 to 4 [ 301.450120][T30909] loop0: detected capacity change from 0 to 4 [ 301.456544][T30906] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200025008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xcc, 0x0, 0x0, 0x0, 0x0) [ 301.488991][T30909] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.507570][T30906] loop5: detected capacity change from 0 to 4 [ 301.527287][T30906] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:46 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xcd, 0x0, 0x0, 0x0, 0x0) [ 301.553207][T30925] loop4: detected capacity change from 0 to 4 [ 301.579013][T30929] loop3: detected capacity change from 0 to 4 [ 301.587535][T30909] loop0: detected capacity change from 0 to 4 [ 301.594885][T30909] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.612084][T30929] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.612872][T30925] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.631044][T30947] loop5: detected capacity change from 0 to 4 02:47:46 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xce, 0x0, 0x0, 0x0, 0x0) 02:47:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200074008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 301.651580][T30929] loop3: detected capacity change from 0 to 4 [ 301.659916][T30925] loop4: detected capacity change from 0 to 4 [ 301.666739][T30925] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.680529][T30947] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.694709][T30929] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.747858][T30972] loop0: detected capacity change from 0 to 4 [ 301.758907][T30972] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.775800][T30947] loop5: detected capacity change from 0 to 4 [ 301.799760][T30947] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 301.800448][T30972] loop0: detected capacity change from 0 to 4 [ 301.817290][T30972] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20a126008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200004068000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xcf, 0x0, 0x0, 0x0, 0x0) 02:47:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x4841) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) 02:47:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 302.193472][T31002] loop1: detected capacity change from 0 to 136 [ 302.203660][T31002] isofs_fill_super: root inode is not a directory. Corrupted media? [ 302.211742][T30999] loop3: detected capacity change from 0 to 4 [ 302.218222][T31000] loop5: detected capacity change from 0 to 4 [ 302.219957][T31010] loop4: detected capacity change from 0 to 4 [ 302.237489][T31006] loop0: detected capacity change from 0 to 4 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd0, 0x0, 0x0, 0x0, 0x0) 02:47:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000078000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 302.247952][T31010] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.264429][T30999] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.265768][T31000] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.288570][T31006] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.313646][T31026] loop1: detected capacity change from 0 to 136 [ 302.333021][T31026] isofs_fill_super: root inode is not a directory. Corrupted media? [ 302.339357][T31006] loop0: detected capacity change from 0 to 4 [ 302.348257][T30999] loop3: detected capacity change from 0 to 4 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd1, 0x0, 0x0, 0x0, 0x0) [ 302.359615][T31000] loop5: detected capacity change from 0 to 4 [ 302.366325][T30999] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.366343][T31000] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.376896][T31006] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.396283][T31045] loop4: detected capacity change from 0 to 4 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd2, 0x0, 0x0, 0x0, 0x0) 02:47:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20002e008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x4841) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) [ 302.405988][T31045] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200068008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000fe008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd3, 0x0, 0x0, 0x0, 0x0) [ 302.479406][T31045] loop4: detected capacity change from 0 to 4 [ 302.498466][T31045] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.507932][T31066] loop1: detected capacity change from 0 to 136 02:47:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000098000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 302.526745][T31072] loop3: detected capacity change from 0 to 4 [ 302.548043][T31066] isofs_fill_super: root inode is not a directory. Corrupted media? [ 302.556640][T31072] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.568753][T31082] loop0: detected capacity change from 0 to 4 [ 302.593139][T31082] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.602596][T31088] loop5: detected capacity change from 0 to 4 [ 302.615485][T31088] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.636067][T31098] loop4: detected capacity change from 0 to 4 02:47:47 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd4, 0x0, 0x0, 0x0, 0x0) 02:47:47 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x4841) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) [ 302.636120][T31072] loop3: detected capacity change from 0 to 4 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd5, 0x0, 0x0, 0x0, 0x0) [ 302.679683][T31072] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.691946][T31082] loop0: detected capacity change from 0 to 4 [ 302.701601][T31098] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.714968][T31082] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20003f008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd6, 0x0, 0x0, 0x0, 0x0) [ 302.752919][T31098] loop4: detected capacity change from 0 to 4 [ 302.759159][T31088] loop5: detected capacity change from 0 to 4 [ 302.776006][T31120] loop1: detected capacity change from 0 to 136 02:47:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200004028000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 302.795793][T31098] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.811008][T31120] isofs_fill_super: root inode is not a directory. Corrupted media? [ 302.822737][T31088] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd7, 0x0, 0x0, 0x0, 0x0) 02:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000000a8000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 302.860857][T31145] loop3: detected capacity change from 0 to 4 [ 302.889557][T31150] loop0: detected capacity change from 0 to 4 02:47:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20006c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x440}, 0x4841) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) [ 302.912434][T31145] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.943665][T31150] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd8, 0x0, 0x0, 0x0, 0x0) [ 302.958553][T31159] loop4: detected capacity change from 0 to 4 [ 302.973096][T31159] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 302.983617][T31170] loop5: detected capacity change from 0 to 4 [ 302.985801][T31174] loop1: detected capacity change from 0 to 136 [ 303.000370][T31170] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200000038000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 303.019370][T31145] loop3: detected capacity change from 0 to 4 [ 303.026988][T31159] loop4: detected capacity change from 0 to 4 [ 303.034036][T31174] isofs_fill_super: root inode is not a directory. Corrupted media? [ 303.042372][T31145] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.054212][T31159] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xd9, 0x0, 0x0, 0x0, 0x0) 02:47:48 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) 02:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000000b8000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200040008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 303.063976][T31170] loop5: detected capacity change from 0 to 4 [ 303.088369][T31170] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.101699][T31198] loop0: detected capacity change from 0 to 4 02:47:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200074008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xda, 0x0, 0x0, 0x0, 0x0) [ 303.141886][T31198] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.174594][T31218] loop1: detected capacity change from 0 to 136 [ 303.181140][T31214] loop4: detected capacity change from 0 to 4 [ 303.211462][T31227] loop5: detected capacity change from 0 to 4 [ 303.211462][T31224] loop3: detected capacity change from 0 to 4 [ 303.220080][T31227] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.233632][T31214] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.243976][T31218] isofs_fill_super: root inode is not a directory. Corrupted media? [ 303.252363][T31198] loop0: detected capacity change from 0 to 4 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xdb, 0x0, 0x0, 0x0, 0x0) 02:47:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200002048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xdc, 0x0, 0x0, 0x0, 0x0) [ 303.255575][T31224] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.285200][T31198] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.331839][T31227] loop5: detected capacity change from 0 to 4 [ 303.337621][T31214] loop4: detected capacity change from 0 to 4 [ 303.351355][T31227] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.362620][T31214] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.376288][T31224] loop3: detected capacity change from 0 to 4 02:47:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007a008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xdd, 0x0, 0x0, 0x0, 0x0) [ 303.379366][T31264] loop0: detected capacity change from 0 to 4 [ 303.393100][T31264] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.406213][T31224] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.418269][T31268] loop1: detected capacity change from 0 to 136 02:47:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000000c8000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200048008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 303.443790][T31268] isofs_fill_super: root inode is not a directory. Corrupted media? [ 303.472654][T31264] loop0: detected capacity change from 0 to 4 02:47:48 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xde, 0x0, 0x0, 0x0, 0x0) [ 303.488333][T31264] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.502276][T31284] loop5: detected capacity change from 0 to 4 [ 303.524798][T31284] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.534563][T31293] loop3: detected capacity change from 0 to 4 02:47:48 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200006048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xdf, 0x0, 0x0, 0x0, 0x0) [ 303.561902][T31293] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.589153][T31306] loop4: detected capacity change from 0 to 4 [ 303.595500][T31284] loop5: detected capacity change from 0 to 4 [ 303.611646][T31309] loop1: detected capacity change from 0 to 136 [ 303.611646][T31293] loop3: detected capacity change from 0 to 4 [ 303.624266][T31293] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.634986][T31306] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20004c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:48 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe0, 0x0, 0x0, 0x0, 0x0) 02:47:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20007c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 303.655325][T31284] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.666211][T31309] isofs_fill_super: root inode is not a directory. Corrupted media? [ 303.686699][T31329] loop0: detected capacity change from 0 to 4 02:47:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="2000000d8000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:49 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) [ 303.745871][T31329] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.745892][T31344] loop5: detected capacity change from 0 to 4 [ 303.755396][T31344] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.823491][T31353] loop1: detected capacity change from 0 to 136 [ 303.830035][T31344] loop5: detected capacity change from 0 to 4 [ 303.845766][T31344] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.864256][T31356] loop3: detected capacity change from 0 to 4 02:47:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe1, 0x0, 0x0, 0x0, 0x0) [ 303.874935][T31356] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.887798][T31353] isofs_fill_super: root inode is not a directory. Corrupted media? [ 303.906078][T31365] loop4: detected capacity change from 0 to 4 [ 303.909811][T31329] loop0: detected capacity change from 0 to 4 02:47:49 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="20197c008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) 02:47:49 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f45000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8800}], 0x0, &(0x7f00000003c0)={[{@overriderock='overriderockperm'}]}) [ 303.921344][T31329] EXT4-fs (loop0): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.943532][T31356] loop3: detected capacity change from 0 to 4 [ 303.962536][T31365] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) 02:47:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe2, 0x0, 0x0, 0x0, 0x0) 02:47:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200010048000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 303.973218][T31356] EXT4-fs (loop3): bad geometry: block count 128 exceeds size of device (1 blocks) [ 303.996117][T31365] loop4: detected capacity change from 0 to 4 02:47:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0xe3, 0x0, 0x0, 0x0, 0x0) 02:47:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="200060008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@data_err_ignore='data_err=ignore'}]}) [ 304.028520][T31365] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (1 blocks) [ 304.038094][T31389] loop5: detected capacity change from 0 to 4 [ 304.043859][T31397] loop0: detect