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", @generic="e661777d8d5094d6fffd25618f1cb66f6a82f3c2aed8f3d14faaa7820761e369ff8144817266fcd7d877394237d72891c373784f9009eea08cd05b09b250fe9dc61fe7b8feb39e58123946fc3368"]}, @generic="209dcd8db9a259e912343c9e238b1e97da246a1441524c5177d1f4c0141fb21cc67d7d8597697bbae66666f7450efa828eaab5f7f3f93a9de022d208121f0536c3bfec0b6f4f44ee4695f1c778640044f8f51cdab6d7", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@empty}, @generic="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", @generic="ac83375e70c60b78f30739b1821c6b9a173a84e95607495cd03c0a2c934b7c5332366612ff44ec40c2cc2038036839a278f67aa7d07f1cd824905ba4b2c9c1acf0da452e104f3dbb9ed3fe7a3e8b4739f415f6ffe527898f862c804d38fa702bf8c73ce171137018"]}, 0x41f8}], 0x2, &(0x7f0000000140)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r0]}}], 0x20, 0x200000c5}, 0x24000000) [ 1688.363359][T25734] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1688.373830][T25734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1688.380307][T25734] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1688.400507][T25734] EXT4-fs (loop3): Remounting filesystem read-only 16:59:31 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f005403000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1688.407158][T25734] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1688.421200][T25734] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1688.427793][T25734] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1688.697341][T25752] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 16:59:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7f, 0x81, 0x1f, 0x80, 0x0, 0xf3d9, 0x38020, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x800, 0x6, 0x3, 0x4, 0x3ff, 0x8, 0x6, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x2, r1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1688.756368][T25774] loop4: detected capacity change from 0 to 1054 [ 1688.779191][T25774] EXT4-fs (loop4): bad geometry: first data block 3842 is beyond end of filesystem (512) 16:59:31 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1688.822445][T25860] loop4: detected capacity change from 0 to 1054 [ 1688.836911][T25860] EXT4-fs (loop4): bad geometry: first data block 3842 is beyond end of filesystem (512) 16:59:31 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000001000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:31 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x4d) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000780)={{r1}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0xff, 0x20, 0x0, 0x0, 0x0, 0x80010, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x2}, 0x4040, 0x2, 0xb8, 0x0, 0x2, 0xfffffffb, 0x400, 0x0, 0x0, 0x0, 0xffff}, r0, 0x3, r1, 0x1) unshare(0x40000200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 1688.943791][T25884] loop3: detected capacity change from 0 to 1054 [ 1688.979936][T25884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1688.991458][T25884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1688.997868][T25884] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:31 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f005e03000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1689.035296][T25884] EXT4-fs (loop3): Remounting filesystem read-only [ 1689.041880][T25884] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1689.055818][T25884] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1689.062446][T25884] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x8, 0x8001, {{0x14, 0x4, 0x0, 0x3f, 0x50, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @empty, {[@end, @noop, @timestamp={0x44, 0xc, 0x70, 0x0, 0x2, [0x19, 0x4]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x3, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@remote, 0x9}]}, @noop, @generic={0x89, 0x11, "946034e67a3bede09afd3c11b60a9c"}]}}}}}) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @link_local}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="000127bd7000fedbdf25190000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="6c0001801400020076657468305f746f5f626f6e64000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000000000008000300030000001400020069703667726530000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000300010000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3000018008000300030000001400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000605f6beffebeddba3ca6188fbf5c00018008000300020000001400020076657468305f746f5f626f6e644a16a809000b00", @ANYRES32=0x0, @ANYBLOB="08000300052605941400020076657468315f6d616376746170000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="0800030002000000"], 0x134}}, 0x8024) sendto$inet6(r4, &(0x7f0000000580)="977a0f7e2ac792dd9297ef265fa28a2923bfc7af7036ddfac83ea775223173c151e8bf3b2b44dd38657ab26bd456afff91e30be96b8e18d0aeef416764dd5d3c59ef4ea0968ee466caf5e1d6384802cf0c4677ce4c1ecddede211ad1e35dc770f86ec2f076926250894432038c7a200e6d90098021b70bac2cef422a585ce26d54d9913f18726254e3b305ca17db3fbf90a43f015e5dad74bb4a8d288adf03c18b7fe0ff6eb3f02a7957352c7d6960c62dcccaea65f970c46b612434e3fbba350bf8365142cab1f2d76a84", 0xcb, 0x8000, &(0x7f0000000680)={0xa, 0x4e21, 0x2, @local, 0x81}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) 16:59:32 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x4d) tkill(r2, 0x3a) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000780)={{r3}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x9, 0x7, 0x3f, 0x0, 0x2, 0x10000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x211, 0x401, 0x7, 0x6, 0x5, 0x7cf1faac, 0x9, 0x0, 0x3f, 0x0, 0x6}, r2, 0x4, r3, 0x8) ftruncate(r1, 0x3ff) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x8, 0x40, 0x80, 0x0, 0x401, 0x800, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x488c8, 0x1, 0x9, 0x6, 0xf91, 0x100, 0x3, 0x0, 0x69, 0x0, 0x5}, 0xffffffffffffffff, 0x6, r0, 0x8) [ 1689.347500][T26002] loop4: detected capacity change from 0 to 1054 [ 1689.369537][T26002] EXT4-fs (loop4): bad geometry: first data block 4096 is beyond end of filesystem (512) [ 1689.422145][T26008] loop4: detected capacity change from 0 to 1054 [ 1689.429148][T26008] EXT4-fs (loop4): bad geometry: first data block 4096 is beyond end of filesystem (512) 16:59:32 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000001100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1689.511713][T26017] loop3: detected capacity change from 0 to 1054 [ 1689.552233][T26017] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1689.562766][T26017] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1689.569175][T26017] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1689.581305][T26017] EXT4-fs (loop3): Remounting filesystem read-only [ 1689.587833][T26017] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 16:59:32 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f005f03000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1689.601747][T26017] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1689.608857][T26017] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:32 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:32 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='pipefs\x00', 0x40000, &(0x7f0000000200)='&\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x200000, 0x12) 16:59:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r1, &(0x7f0000000380)=""/240, 0xf0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0xff, 0x4, 0x3f, 0x5, 0x2, "ec06bb81ccf0705318c36ed7fc39d50dc19711", 0x7fffffff, 0x7ff}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) [ 1689.835143][T26138] loop4: detected capacity change from 0 to 1054 [ 1689.880124][T26138] EXT4-fs (loop4): bad geometry: first data block 4352 is beyond end of filesystem (512) [ 1689.920756][T26144] loop4: detected capacity change from 0 to 1054 [ 1689.928423][T26144] EXT4-fs (loop4): bad geometry: first data block 4352 is beyond end of filesystem (512) 16:59:32 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00d9c01f1100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1689.992025][T26149] loop3: detected capacity change from 0 to 1054 [ 1690.026049][T26149] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1690.037375][T26149] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1690.043812][T26149] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1690.056531][T26149] EXT4-fs (loop3): Remounting filesystem read-only [ 1690.063075][T26149] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1690.077161][T26149] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1690.083790][T26149] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:32 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006003000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:32 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:32 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 16:59:32 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x10420, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) [ 1690.340716][T26283] loop4: detected capacity change from 0 to 1054 [ 1690.379366][T26283] EXT4-fs (loop4): bad geometry: first data block 4383 is beyond end of filesystem (512) [ 1690.432516][T26291] loop4: detected capacity change from 0 to 1054 [ 1690.440415][T26291] EXT4-fs (loop4): bad geometry: first data block 4383 is beyond end of filesystem (512) [ 1690.476072][T26296] loop3: detected capacity change from 0 to 1054 16:59:33 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000001200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1690.518930][T26296] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1690.537564][T26296] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1690.544009][T26296] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1690.559236][T26296] EXT4-fs (loop3): Remounting filesystem read-only 16:59:33 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006103000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1690.565929][T26296] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1690.579868][T26296] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1690.586485][T26296] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:33 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') unshare(0x40000200) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 16:59:33 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x80, 0xb1) 16:59:33 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1691.026239][T26425] loop4: detected capacity change from 0 to 1054 [ 1691.068371][T26425] EXT4-fs (loop4): bad geometry: first data block 4608 is beyond end of filesystem (512) 16:59:33 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0200090000230a4b7c0600002e6a9800bdeff00d4a2741a6cfee09980800000000000000184e0f6dbe0758da49911ec67d49d03695f6526b1b69bc5f2de1d9af86e60ebd0a62627841f1e9e8ae3d5d77c6762a1ea3c9052e95e8fdf0d059a67e9d9a16b2ae4a101aed8e86a9a6fba61bb1f1dc030a9a394065f6f4e69e4061d6161ecbf984d18c90018647d07bb8e93283310b7e1deb72d894ae6c797bced57970a448ecd051a189ba20dcb811df20ce46f003c94dc6c497"]) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x401) unshare(0x40000200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="9e4a33a90e788ff1e71ef37aa48f8ceb1b6c1f37281519df3d1cc3b78814f845584b06c474c53c5df89ca2a978896de9f8a482663d8381d921d8c555bff7cf0a13df0d7bfc198a241cef280fbef165", 0x4f}, {&(0x7f0000000300)="ef29c8beb7139a30ab7841bad97273acc127fde65153e0e12da3b20c26ce496af47807165c8194d64053e93fa29747fa43e05c61e7d11dbd822b37db86a8d4c3eef984c25b2a1915be21d279c8c04f31d2400d54912ad8a61ec75ecc2af2b678e62aab53d269ca9d7bff552eb98ffeb78f3afdb9c3143dee62fec4549b75a5efee04fefbef710336476caba54f89906d8babe2195c411ae4444da1afd6f8ebbbf194b72efe746663225b3d3fcb6a8a32160db920d02c2eec928b93697cca00de06e09fcebfd90635b3baa22c7f", 0xcd}, {&(0x7f0000000400)="e29bb7c62ca6e604b7d526348a2e17c6ffe682e904b8ae482d539574f6ce2d3c81786143008cef7c752c4eda4cca2e5a097815f478b8eef3a2531d19cab60f4ad15fca6f119396657d66126f9c225f06b539a82daa6777ea2caa8de0bf508b385a02c32e57025083e0d847a5cbd1927e63ecf9ab70549025165c75c9f94c251d9a6a8e7a15c64583d11e4eb452ef46353f90", 0x92}], 0x3) r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x10040, 0x112, 0x10}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000500)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000004c0)={0x80000000, 0x3ff, 0x3ca, 0x4, 0x7, 0x2}) [ 1691.112039][T26442] loop4: detected capacity change from 0 to 1054 [ 1691.121788][T26442] EXT4-fs (loop4): bad geometry: first data block 4608 is beyond end of filesystem (512) 16:59:33 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000001800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1691.160035][T26449] loop3: detected capacity change from 0 to 1054 [ 1691.196110][T26449] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1691.218326][T26449] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1691.224872][T26449] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1691.237010][T26449] EXT4-fs (loop3): Remounting filesystem read-only [ 1691.243573][T26449] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1691.257597][T26449] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60948, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4400, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "6839ba8c499651fc96659ab575aee893c899a9f6"}, 0x15, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r0, 0x10a53000) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) 16:59:33 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006403000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1691.264229][T26449] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:34 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1691.530283][ C0] sd 0:0:1:0: tag#4338 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1691.540707][ C0] sd 0:0:1:0: tag#4338 CDB: opcode=0xe5 (vendor) [ 1691.547043][ C0] sd 0:0:1:0: tag#4338 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1691.556109][ C0] sd 0:0:1:0: tag#4338 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1691.565150][ C0] sd 0:0:1:0: tag#4338 CDB[20]: ba [ 1691.696147][T26480] loop4: detected capacity change from 0 to 1054 [ 1691.747111][T26480] EXT4-fs (loop4): bad geometry: first data block 6144 is beyond end of filesystem (512) 16:59:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000001840)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="5710ed590811d45462cc5c07221f48601ac0f7447f68e04f95158e6ceccd0b48decec978a49776ed7d7ad94a504b391a8cdfb39ee0ab38b6acc7c37023b29bebaf315cc73bc5352fa40c32308f7d7cc1da9af905f02f390cdda32aa419488b953e1a27cf5c8f2ff2c74732d6016fdf320045bfc482e1a886f989daaa51c5e72ee3124eed19b66c676050be3398033d457995b5bd5d0573", 0x97}, {&(0x7f00000012c0)="541bbe88a52af2fd2ce390486493e4327095666bd08b25da4b7b110b8af8d846c67497", 0x23}, {&(0x7f0000001300)="ca7b6c8ac4ea1c4fc5eda1b2f452beb32535767df724b02c6b36fc51df3f2f1ac7d437d7209d820ac6f09374025bd37170ccc50cf1de486c4786c2a1044b16e95963351996196fa2670c50f39417323e6f008152f111be2114c2f7e3672a44a972fe98926a7bd755802d0580aba85e941fe6e85c6583eef9d63f4e57f4fa3ce5cdfa039c5adf0a3e1c151288fd14ecb4bb979794c4566960cc87a79a5ffe9e583d92fd2f3737c8c4936b0d8cb33e342831be6fd3e0b3451b585d", 0xba}, {&(0x7f00000013c0)="3776cc1652802f2317a745bf82d2938d00aa785c02d5d41b4fe661315407658c7d010cceb1d0c79e33e2274af6485a13e51ed4af3c0ebc5b9eff795e749b05ec1c02751ef321d077a4b38e16ec3a644f0d689ee65010a1fc4a78243ab91a874474b1ee00dd220f3cb571ccb8a504e1d713fa7a1a6b2df2d56576024218c8e2c7b69a9aa44e2d01a8a0f791e8b72ec0006baa60bda968234fc0bc0ec7fa53b6d5e855795f203774b979dda70d3e2fcc9e43b30e8a2a49dc8c1c7ea99ff3f68bf306bdf41fde480d1cff0249", 0xcb}, {&(0x7f00000014c0)="7dc4ffa07400e38fabaee91e24852f26dd8433ac43c4a8f19fa699aacc2c298ecabaa75eb91834d67c9717875ed922d7f959be8613f7fa37146b56a1c29631a84f56045202abc9f060db5bce530c83f3f54628ec59a9b8ca119a507f8b6d648597e2093edba6c7b6c1f7d73fc0cb749b61a29f7b5deed70b6a4c8b91c6c1904b9d75cc4f02baddb7a4b11f2aad17f0968c29363c4cb0353d2a5869b1d874f9edb38a82b92a83b59a7f15af7dbfef0dc1c3697c3eed78464fbd3a39f95b34b2ae2f4d9841c074efc93f0d3298d0d8af2cc5bcef2675dc2a342d0d6c1082fc69ac4708949c7baed69e2f9969", 0xeb}, {&(0x7f00000015c0)="0a900f0bce5d7ae2c1016a790e2645993267f8e7c6782dc0e4eb39ec656c49cf781ff0c9dbe8f9d835fc25c51e8c8531d523bbf5b6721b4345fbe2b165bbbe8e240cf6f5fe51d1b7b0c740f86f6c078bdfa283a1b753a6f9df579d985a507802e4899d4992ea1ffcae654a40e599eb691f0cf00a32dda7f1414d8e6704b14b1315ffe49581617b6da3f6edf8bf9cd32bd8014fa0d6c8ac1c5eabec1e91a6e924c09b16d4ec9865543b0ddabc5964ea30e984248cd4ae994e860a58793ecae22d7c5e79308b8e88dc547d39b2f8d7c7b63868d5a88850ee298603ab5c3ab3", 0xde}, {&(0x7f00000016c0)="b89b4c500d5fb396c041e3c1c0afbc13137bd3258e0dc6eccc307786904a3b16f0f1bbb9829c59d0e6dae40a365eefe2eb6723064878e610b4d7d0f011695e62152fae82601c7beee693dae4f65501fd381f5b743ba6a341594ce6812c5380848bf8a44b2fd13c7bbab45b8e0dc9fdbef0aa39a80cdbfb018d535c77180bfa826a968a5fac728542ed739d9aa305f6ee624d9de907ea038c5914335e0a1e1a90fd9024b676a24fe2e0f42812d0de75a2dfb98cf43b79b043208e047f1d75f503d25b0e26e9bfa654721742c0543c1acd", 0xd0}, {&(0x7f00000017c0)="27ee442f459ce9368aad716d23dfcb4d782e58521897a4a9f8ca38", 0x1b}, {&(0x7f0000001800)="41826e67345092157411f1b8a23c529a0a7423e5", 0x14}], 0xa, 0xfff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x9, 0x7f, 0x20, 0x2, 0x0, 0x1, 0x80, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x10000, 0x8, 0x80000000, 0x0, 0xd39a9d2, 0x9, 0x1, 0x0, 0xff, 0x0, 0x1000}, r1, 0xd, r3, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1691.804202][T26593] loop4: detected capacity change from 0 to 1054 [ 1691.823632][T26593] EXT4-fs (loop4): bad geometry: first data block 6144 is beyond end of filesystem (512) [ 1691.850799][T26597] loop3: detected capacity change from 0 to 1054 16:59:34 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000001f00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1691.888360][T26597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1691.914082][T26597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1691.920597][T26597] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1691.970347][T26597] EXT4-fs (loop3): Remounting filesystem read-only [ 1691.977065][T26597] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1691.991109][T26597] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1691.998213][T26597] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:34 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006503000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1692.109218][T26611] loop4: detected capacity change from 0 to 1054 [ 1692.137269][T26611] EXT4-fs (loop4): bad geometry: first data block 7936 is beyond end of filesystem (512) 16:59:34 executing program 5: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @private1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="268d718fa515992f4584f208428bf049774ca9c33ad9ee90a68e0a38a174cc70027a94cf117939b97f2dff239efe5d9b18f9d5858e5123bae74d98af61cbfd7656108864cf351af2f445764e69094531ec9f", 0x52}, {&(0x7f0000000340)="783766c2a2efc4a540bafbd95df107892c9d533d95e425686d374d526f443ff4ac0466d2f7dffa72c2741653381118182b3a0b3783030f7b059e8e60a63de71f2360c1c481565ba78ddcd1b51bc0a20f4b4f8567092791fc31142f13ff8b40f22979cc777413d952f683cd40cd40e60542ba0926a7b7591a16922b4e8830cbc872", 0x81}, {&(0x7f0000000400)="34ab44bc8a7cfd5f8fe0058ea488cf908d14c1", 0x13}, {&(0x7f0000000440)="10e9e0f71d22f853805deaefa569a0b356bf60be2d654cc8bbe3a6118b13602b2ac3a2674a998989174523b01b8e266a104a296bdc831e16e2cef28052cf732eb4bac70befb3e3d83b3b1702b70065f188139c13d4f6", 0x56}], 0x4}}, {{&(0x7f0000000500)=@isdn={0x22, 0x3, 0x6, 0x20, 0x4}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)="c77c7c034cf78ec8e0d78cedefc561539b815c9a62ce0aeb99d53fa70953411094d37e78ecb99180a37431c13842c511877547f2f5ef51", 0x37}, {&(0x7f00000005c0)="c61e107dada1d9a69c08ad18c222e63bad68bd504da11e12ac23071ad7d12809032d94faf26eff41027fa21ba9d6a1fdc3f10ea314ca8f22f869ab275ed0dece866a2f6a0bfef7d59ae552eae4807cbcccc6e14b3b819a6875ce4fcfe3c87cae1562d00d2406a09f7056", 0x6a}], 0x2, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x7c65}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}}, {{&(0x7f0000000700)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="96c10c3c9682d76303e3beca37826357b9e82c5660b2f52e67e97f7bb827e63fde7da3ea73962637827f956ae481d52ae6d8bf109138d1bf8867e18544f96d847040b6dd3a883556eb102d61bb3563ce2f516e149b87891898f8dea666ee5a0a6a580cca0f7479ce3c23928c35b81b2110da17280fe146b505b82f2855af9a410e221e80e47e84c4d500", 0x8a}, {&(0x7f0000000840)="4b27ff10193650a46d15660c2e6b9acb4744dd4380f62ca7817cce81f835b482b96802a03a1095e5329554e1dd0270cdf86ca434bdb908b2aca802d2187353bd1cf09c5b0a84199e544ad1a3401294e43c37052bdf637feb4f3796532c2de9ea46eb81e77aa1f75b5b8e85c6ceeafbdb5db8109893c198", 0x77}], 0x2, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x3, 0x20004010) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='pipefs\x00', 0x1000081, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1f, 0x9, 0x1f, 0x0, 0x8, 0x8088, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40105, 0x100, 0x80000000, 0x0, 0x9, 0x6, 0x5, 0x0, 0x7fffffff, 0x0, 0xde8a}, 0x0, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x1) [ 1692.231750][T26720] loop4: detected capacity change from 0 to 1054 [ 1692.257846][T26720] EXT4-fs (loop4): bad geometry: first data block 7936 is beyond end of filesystem (512) 16:59:35 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000002000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:35 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280), 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1692.335468][T26725] loop3: detected capacity change from 0 to 1054 [ 1692.383321][T26725] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1692.415261][T26725] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1692.421763][T26725] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1692.480349][T26725] EXT4-fs (loop3): Remounting filesystem read-only [ 1692.486890][T26725] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1692.501174][T26725] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1692.507779][T26725] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:35 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:35 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006603000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:35 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280), 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1692.737512][T26842] loop4: detected capacity change from 0 to 1054 [ 1692.772039][T26842] EXT4-fs (loop4): bad geometry: first data block 8192 is beyond end of filesystem (512) [ 1692.845050][T26852] loop4: detected capacity change from 0 to 1054 [ 1692.865095][T26852] EXT4-fs (loop4): bad geometry: first data block 8192 is beyond end of filesystem (512) 16:59:35 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000032000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1692.936896][T26861] loop3: detected capacity change from 0 to 1054 [ 1692.964659][T26861] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1693.010169][T26861] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1693.016622][T26861] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1693.029038][T26861] EXT4-fs (loop3): Remounting filesystem read-only [ 1693.035743][T26861] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1693.049675][T26861] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:35 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280), 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1693.056358][T26861] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1693.166354][T26870] loop4: detected capacity change from 0 to 1054 16:59:35 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006b03000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1693.212468][T26870] EXT4-fs (loop4): bad geometry: first data block 8195 is beyond end of filesystem (512) 16:59:35 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1693.272798][T26880] loop4: detected capacity change from 0 to 1054 [ 1693.288836][T26880] EXT4-fs (loop4): bad geometry: first data block 8195 is beyond end of filesystem (512) 16:59:36 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000102000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1693.452466][T26894] loop3: detected capacity change from 0 to 1054 [ 1693.473553][T26894] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1693.497039][T26894] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1693.503509][T26894] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1693.535752][T26901] loop4: detected capacity change from 0 to 1054 [ 1693.548958][T26894] EXT4-fs (loop3): Remounting filesystem read-only [ 1693.555613][T26894] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1693.569565][T26894] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1693.576200][T26894] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1693.590875][T26901] EXT4-fs (loop4): bad geometry: first data block 8208 is beyond end of filesystem (512) 16:59:36 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f009c03000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1693.663387][T26908] loop4: detected capacity change from 0 to 1054 [ 1693.690182][T26908] EXT4-fs (loop4): bad geometry: first data block 8208 is beyond end of filesystem (512) 16:59:36 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000032100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:36 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1693.738585][T26916] loop3: detected capacity change from 0 to 1054 [ 1693.768406][T26916] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1693.814330][T26916] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1693.820811][T26916] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1693.879807][T26916] EXT4-fs (loop3): Remounting filesystem read-only [ 1693.886345][T26916] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1693.900266][T26916] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1693.906854][T26916] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1693.915109][T26927] loop4: detected capacity change from 0 to 1054 [ 1693.958626][T26927] EXT4-fs (loop4): bad geometry: first data block 8451 is beyond end of filesystem (512) 16:59:36 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00c103000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1694.033315][T26935] loop4: detected capacity change from 0 to 1054 [ 1694.047268][T26935] EXT4-fs (loop4): bad geometry: first data block 8451 is beyond end of filesystem (512) [ 1694.111387][T26943] loop3: detected capacity change from 0 to 1054 [ 1694.130174][T26943] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 16:59:36 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000002200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1694.161113][T26943] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1694.167537][T26943] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:36 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:37 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x40000200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r4}, {}, {r3}, {r3}, {r3, r4}, {}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {r2}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {}, {}, {}, {}, {r2}, {}, {}, {}, {r2, r4}, {0x0, r4}, {r2}, {r3, r4}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {r2}, {0x0, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {}, {r2, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3, r4}, {r2, r4}, {r3}, {0x0, r4}, {}, {r3}, {}, {}, {0x0, r4}, {r2}, {0x0, r4}, {r3, r4}, {r2}, {0x0, r4}, {r3, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {r3}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {r2}, {}, {r2, r4}, {r3, r4}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {r3}, {r2, r4}, {r2, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {r2}, {}, {r2}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2, r4}, {r3}, {r3, r4}, {}, {}, {r2}, {}, {r2}, {r3}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {r3}, {}, {}, {r3}, {0x0, r4}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {}, {}, {r3, r4}, {r2}, {0x0, r4}, {}, {r3}, {r2}, {r3, r4}, {r3}, {r2}, {}, {}, {r3}, {r2, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {r3, r4}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000004a780)={{0x0, 0xe3, 0x7, 0x9, 0x2, 0x5, 0x0, 0xc54b, 0x8, 0x7fffffff, 0x45b8, 0x8, 0x200, 0x1, 0x100000001}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000004b780)={{0x0, 0x7, 0x8, 0x1, 0x7, 0xffff, 0x7, 0x8, 0x2000000, 0x5, 0x2b, 0xffffffff, 0xe27, 0x204}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004c780)={0x1, [], 0x1, "7816988d803cb8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004d780)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "bfe9313c28cf94"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e980)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "ffc3ffc12380b8"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r12}, {}, {r11}, {r11}, {r11, r12}, {}, {}, {0x0, r12}, {}, {r11}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {r11, r12}, {0x0, r12}, {}, {}, {}, {0x0, r12}, {r11}, {0x0, r12}, {0x0, r12}, {r11}, {0x0, r12}, {r10}, {}, {r10}, {0x0, r12}, {}, {}, {r10, r12}, {r11}, {}, {0x0, r12}, {r11, r12}, {0x0, r12}, {r10, r12}, {}, {0x0, r12}, {r11}, {}, {0x0, r12}, {r11}, {}, {r11}, {0x0, r12}, {}, {r10, r12}, {0x0, r12}, {r10}, {}, {r11}, {r10}, {}, {r11, r12}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r11, r12}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {}, {r10, r12}, {}, {}, {}, {}, {0x0, r12}, {}, {r11}, {r10}, {}, {r11}, {}, {0x0, r12}, {}, {}, {}, {0x0, r12}, {r10}, {}, {0x0, r12}, {0x0, r12}, {r10, r12}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r10, r12}, {0x0, r12}, {r10}, {r11, r12}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {r10}, {0x0, r12}, {}, {0x0, r12}, {r10, r12}, {0x0, r12}, {r11, r12}, {r10, r12}, {r11}, {}, {r10, r12}, {r10}, {r11, r12}, {}, {r10}, {r10, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r11, r12}, {}, {0x0, r12}, {r10, r12}, {0x0, r12}, {r11, r12}, {r10, r12}, {r11}, {0x0, r12}, {}, {r11}, {}, {}, {0x0, r12}, {r10}, {0x0, r12}, {r11, r12}, {r10}, {0x0, r12}, {r11, r12}, {0x0, r12}, {0x0, r12}, {}, {0x0, r12}, {r11}, {0x0, r12}, {r11}, {r10}, {}, {}, {}, {0x0, r12}, {r10, r12}, {r11}, {}, {0x0, r12}, {}, {r11}, {0x0, r12}, {}, {}, {r10}, {r10}, {}, {r10, r12}, {r11, r12}, {0x0, r12}, {}, {}, {r10}, {0x0, r12}, {r11}, {r10, r12}, {r10, r12}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {r11}, {r10}, {}, {r10}, {}, {0x0, r12}, {r11, r12}, {0x0, r12}, {}, {0x0, r12}, {}, {r11, r12}, {r10, r12}, {r11}, {r11, r12}, {}, {}, {r10}, {}, {r10}, {r11}, {}, {r10, r12}, {}, {}, {}, {r11}, {0x0, r12}, {r10}, {r11}, {r11}, {}, {}, {r11}, {0x0, r12}, {0x0, r12}, {r10}, {r10}, {}, {0x0, r12}, {}, {}, {r11, r12}, {r10}, {0x0, r12}, {}, {r11}, {r10}, {r11, r12}, {r11}, {r10}, {}, {}, {r11}, {r10, r12}, {0x0, r12}, {r10, r12}, {0x0, r12}, {r11}, {r11}, {r10}, {0x0, r12}, {r11, r12}, {r11}, {0x0, r12}, {}, {}, {0x0, r12}, {r10, r12}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r16}, {}, {r15}, {r15}, {r15, r16}, {}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {}, {r15, r16}, {0x0, r16}, {}, {}, {}, {0x0, r16}, {r15}, {0x0, r16}, {0x0, r16}, {r15}, {0x0, r16}, {r14}, {}, {r14}, {0x0, r16}, {}, {}, {r14, r16}, {r15}, {}, {0x0, r16}, {r15, r16}, {0x0, r16}, {r14, r16}, {}, {0x0, r16}, {r15}, {}, {0x0, r16}, {r15}, {}, {r15}, {0x0, r16}, {}, {r14, r16}, {0x0, r16}, {r14}, {}, {r15}, {r14}, {}, {r15, r16}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {r14, r16}, {}, {}, {}, {}, {0x0, r16}, {}, {r15}, {r14}, {}, {r15}, {}, {0x0, r16}, {}, {}, {}, {0x0, r16}, {r14}, {}, {0x0, r16}, {0x0, r16}, {r14, r16}, {}, {}, {}, {}, {r14}, {}, {}, {}, {r14, r16}, {0x0, r16}, {r14}, {r15, r16}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {r14}, {0x0, r16}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {r15}, {}, {r14, r16}, {r14}, {r15, r16}, {}, {r14}, {r14, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r15, r16}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15, r16}, {r14, r16}, {r15}, {0x0, r16}, {}, {r15}, {}, {}, {0x0, r16}, {r14}, {0x0, r16}, {r15, r16}, {r14}, {0x0, r16}, {r15, r16}, {0x0, r16}, {0x0, r16}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r15}, {r14}, {}, {}, {}, {0x0, r16}, {r14, r16}, {r15}, {}, {0x0, r16}, {0x0}, {r15}, {0x0, r16}, {}, {}, {r14}, {r14}, {}, {r14, r16}, {r15, r16}, {0x0, r16}, {}, {}, {r14}, {0x0, r16}, {r15}, {r14, r16}, {r14, r16}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {r15}, {r14}, {}, {r14}, {}, {0x0, r16}, {r15, r16}, {0x0, r16}, {}, {0x0, r16}, {}, {r15, r16}, {r14, r16}, {r15}, {r15, r16}, {}, {}, {r14}, {}, {r14}, {r15}, {}, {r14, r16}, {}, {}, {}, {r15}, {0x0, r16}, {r14}, {r15}, {r15}, {}, {}, {r15}, {0x0, r16}, {0x0, r16}, {r14}, {r14}, {}, {0x0, r16}, {}, {}, {r15, r16}, {r14}, {0x0, r16}, {}, {r15}, {r14}, {r15, r16}, {r15}, {r14}, {}, {}, {r15}, {r14, r16}, {0x0, r16}, {r14, r16}, {0x0, r16}, {r15}, {r15}, {r14}, {0x0, r16}, {r15, r16}, {r15}, {0x0, r16}, {}, {}, {0x0, r16}, {r14, r16}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r20}, {}, {r19}, {r19}, {r19, r20}, {}, {}, {0x0, r20}, {}, {r19}, {0x0, r20}, {}, {0x0, r20}, {0x0, r20}, {}, {r19, r20}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r19}, {0x0, r20}, {0x0, r20}, {r19}, {0x0, r20}, {r18}, {}, {r18}, {0x0, r20}, {}, {}, {r18, r20}, {r19}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {r18, r20}, {}, {0x0, r20}, {r19}, {}, {0x0, r20}, {r19}, {}, {r19}, {0x0, r20}, {}, {r18, r20}, {0x0, r20}, {r18}, {}, {r19}, {r18}, {}, {r19, r20}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {}, {r18, r20}, {}, {}, {}, {}, {0x0, r20}, {}, {r19}, {r18}, {}, {r19}, {}, {0x0, r20}, {}, {}, {}, {0x0, r20}, {r18}, {}, {0x0, r20}, {0x0, r20}, {r18, r20}, {}, {}, {}, {}, {r18}, {}, {}, {}, {r18, r20}, {0x0, r20}, {r18}, {r19, r20}, {}, {}, {0x0, r20}, {}, {0x0, r20}, {r18}, {0x0, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19, r20}, {r18, r20}, {r19}, {}, {r18, r20}, {r18}, {r19, r20}, {}, {r18}, {r18, r20}, {}, {}, {0x0, r20}, {0x0, r20}, {0x0, r20}, {r19, r20}, {}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19, r20}, {r18, r20}, {r19}, {0x0, r20}, {}, {r19}, {}, {}, {0x0, r20}, {r18}, {0x0, r20}, {r19, r20}, {r18}, {0x0, r20}, {r19, r20}, {0x0, r20}, {0x0, r20}, {}, {0x0, r20}, {r19}, {0x0, r20}, {r19}, {r18}, {}, {}, {}, {0x0, r20}, {r18, r20}, {r19}, {}, {0x0, r20}, {}, {r19}, {0x0, r20}, {}, {}, {r18}, {r18}, {}, {r18, r20}, {r19, r20}, {0x0, r20}, {}, {}, {r18}, {0x0, r20}, {r19}, {r18, r20}, {r18, r20}, {0x0, r20}, {0x0, r20}, {}, {}, {}, {r19}, {r18}, {}, {r18}, {}, {0x0, r20}, {r19, r20}, {0x0, r20}, {}, {0x0, r20}, {}, {r19, r20}, {r18, r20}, {r19}, {r19, r20}, {}, {}, {r18}, {}, {r18}, {r19}, {}, {r18, r20}, {}, {}, {}, {r19}, {0x0, r20}, {r18}, {r19}, {r19}, {}, {}, {r19}, {0x0, r20}, {0x0, r20}, {r18}, {r18}, {}, {0x0, r20}, {}, {}, {r19, r20}, {r18}, {0x0, r20}, {}, {r19}, {r18}, {r19, r20}, {r19}, {r18}, {}, {}, {r19}, {r18, r20}, {0x0, r20}, {r18, r20}, {0x0, r20}, {r19}, {r19}, {r18, 0x0}, {0x0, r20}, {r19, r20}, {r19}, {0x0, r20}, {}, {}, {0x0, r20}, {r18, r20}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004f980)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "3163a63fe60a4b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050980)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r5}, {r6}, {}, {}, {r7, r8}, {}, {0x0, r9}, {}, {0x0, r12}, {0x0, r16}, {}, {r19, r22}], 0x0, "7049d07f80f261"}) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 1694.278632][T26943] EXT4-fs (loop3): Remounting filesystem read-only [ 1694.285336][T26943] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1694.299488][T26943] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1694.306534][T26943] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:37 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00d403000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1694.371821][T26955] loop4: detected capacity change from 0 to 1054 [ 1694.402907][T26955] EXT4-fs (loop4): bad geometry: first data block 8704 is beyond end of filesystem (512) [ 1694.429175][T26959] validate_nla: 10 callbacks suppressed [ 1694.429190][T26959] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:37 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x10400) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 16:59:37 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1694.513899][T26976] loop4: detected capacity change from 0 to 1054 [ 1694.527778][T26976] EXT4-fs (loop4): bad geometry: first data block 8704 is beyond end of filesystem (512) 16:59:37 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000002500000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052040)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "5d3afce16fde60"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r5}, {}, {r4}, {r4}, {r4, r5}, {}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {r4, r5}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r4}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {}, {}, {r3, r5}, {r4}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r1}, {}, {r4}, {0x0, r5}, {0x0}, {r3, r5}, {0x0, r5}, {r3}, {}, {r4}, {r3}, {}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {r3, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {r3}, {}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {r3}, {0x0, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {}, {r3, r5}, {r3}, {r4, r5}, {}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4}, {0x0, r5}, {}, {r4}, {}, {}, {0x0, r5}, {r3}, {0x0, r5}, {r4, r5}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0}, {0x0, r5}, {r4}, {0x0, r5}, {r4}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {r4}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {}, {}, {r3}, {0x0, r5}, {r4}, {r3, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r4}, {r3}, {}, {r3}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {}, {}, {r3}, {}, {r3}, {r4}, {}, {r3, r5}, {}, {}, {}, {r4}, {0x0, r5}, {r3}, {r4}, {r4}, {}, {}, {r4}, {0x0, r5}, {0x0, r5}, {r3}, {r3}, {}, {0x0, r5}, {}, {}, {r4, r5}, {r3}, {0x0, r5}, {}, {r4}, {r3}, {r4, r5}, {r4}, {r3}, {}, {}, {r4}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {r3, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061ec0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x40, "3b13d855e081c0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r11}, {}, {r10}, {r10}, {r10, r11}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {r10, r11}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r10}, {0x0, r11}, {0x0, r11}, {r10}, {0x0, r11}, {r9}, {}, {r9}, {0x0, r11}, {}, {}, {r9, r11}, {r10}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {0x0, r11}, {}, {r9, r11}, {0x0, r11}, {r9}, {}, {r10}, {r9}, {}, {r10, r11}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {}, {r9, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {r9}, {}, {r10}, {}, {0x0, r11}, {}, {}, {}, {0x0, r11}, {r9}, {}, {0x0, r11}, {0x0, r11}, {r9, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {0x0, r11}, {r9}, {r10, r11}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {r9}, {0x0, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {}, {r9, r11}, {r9}, {r10, r11}, {}, {r9}, {r9, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r10, r11}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10, r11}, {r9, r11}, {r10}, {0x0, r11}, {}, {r10}, {}, {}, {0x0, r11}, {r9}, {0x0, r11}, {r10, r11}, {r9}, {0x0, r11}, {r10, r11}, {0x0, r11}, {0x0, r11}, {}, {0x0, r11}, {r10}, {0x0, r11}, {r10}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {r10}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {r9}, {}, {r9, r11}, {r10, r11}, {0x0, r11}, {}, {}, {r9}, {0x0, r11}, {r10}, {r9, r11}, {r9, r11}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {r10}, {r9}, {}, {r9}, {}, {0x0, r11}, {r10, r11}, {0x0, r11}, {}, {0x0, r11}, {}, {r10, r11}, {r9, r11}, {r10}, {r10, r11}, {}, {}, {r9}, {}, {r9}, {r10}, {}, {r9, r11}, {}, {}, {}, {r10}, {0x0, r11}, {r9}, {r10}, {r10}, {}, {}, {r10}, {0x0, r11}, {0x0, r11}, {r9}, {r9}, {}, {0x0, r11}, {}, {}, {r10, r11}, {r9}, {0x0, r11}, {}, {r10}, {r9}, {r10, r11}, {r10}, {r9}, {}, {}, {r10}, {r9, r11}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r10}, {r10}, {r9}, {0x0, r11}, {r10, r11}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {r9, r11}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r14}, {}, {r13}, {r13}, {r13, r14}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {r13, r14}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r13}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {r12}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {r13}, {}, {0x0, r14}, {r13, r14}, {0x0, r14}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {0x0, r14}, {0x0}, {r12, r14}, {0x0, r14}, {r12}, {}, {r13}, {r12}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r12}, {}, {r13}, {}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {0x0, r14}, {r12}, {r13, r14}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {r12}, {0x0, r14}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {r12, r14}, {r13}, {}, {r12, r14}, {r12}, {r13, r14}, {}, {r12}, {r12, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r13, r14}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13, r14}, {r12, r14}, {r13}, {0x0, r14}, {}, {r13}, {}, {}, {0x0, r14}, {r12}, {0x0, r14}, {r13, r14}, {r12}, {0x0, r14}, {r13, r14}, {0x0, r14}, {0x0, r14}, {0x0}, {0x0, r14}, {r13}, {0x0, r14}, {r13}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {r13}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {r12}, {}, {r12, r14}, {r13, r14}, {0x0, r14}, {}, {}, {r12}, {0x0, r14}, {r13}, {r12, r14}, {r12, r14}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {r13}, {r12}, {}, {r12}, {}, {0x0, r14}, {r13, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {r13, r14}, {r12, r14}, {r13}, {r13, r14}, {}, {}, {r12}, {}, {r12}, {r13}, {}, {r12, r14}, {}, {}, {}, {r13}, {0x0, r14}, {r12}, {r13}, {r13}, {}, {}, {r13}, {0x0, r14}, {0x0, r14}, {r12}, {r12}, {}, {0x0, r14}, {}, {}, {r13, r14}, {r12}, {0x0, r14}, {}, {r13}, {r12}, {r13, r14}, {r13}, {r12}, {}, {}, {r13}, {r12, r14}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r13}, {r13}, {r12}, {0x0, r14}, {r13, r14}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {r12, r14}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061ec0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x40, "3b13d855e081c0"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000053040)={{0x0, 0x3, 0x0, 0x3ff, 0x74, 0x1, 0x0, 0x6, 0x6, 0xffffffb0, 0x3, 0x891, 0x0, 0x5, 0x100}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054040)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x19, "25544cf3d7785e"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000055040)={{0x0, 0x7, 0x7, 0x100000001, 0x0, 0x8, 0x8, 0x4a65b146, 0x8, 0x9, 0xffff, 0xfffffffffffffffa, 0x80000001, 0x0, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r23}, {}, {r22}, {r22}, {r22, r23}, {}, {}, {0x0, r23}, {}, {r22}, {0x0, r23}, {}, {0x0, r23}, {0x0, r23}, {}, {r22, r23}, {0x0, r23}, {}, {}, {}, {0x0, r23}, {r22}, {0x0, r23}, {0x0, r23}, {r22}, {0x0, r23}, {r21}, {}, {r21}, {0x0, r23}, {}, {}, {r21, r23}, {r22}, {}, {0x0, r23}, {r22, r23}, {0x0, r23}, {r21, r23}, {}, {0x0, r23}, {r22}, {}, {0x0, r23}, {r22}, {}, {r22}, {0x0, r23}, {}, {r21, r23}, {0x0, r23}, {r21}, {}, {r22}, {r21}, {}, {r22, r23}, {}, {0x0, r23}, {0x0, r23}, {0x0, r23}, {0x0, r23}, {r22, r23}, {0x0, r23}, {0x0, r23}, {0x0, r23}, {}, {r21, r23}, {}, {}, {}, {}, {0x0, r23}, {}, {r22}, {r21}, {}, {r22}, {}, {0x0, r23}, {}, {}, {}, {0x0, r23}, {r21}, {}, {0x0, r23}, {0x0, r23}, {r21, r23}, {}, {}, {}, {}, {r21}, {}, {}, {}, {r21, r23}, {0x0, r23}, {r21}, {r22, r23}, {}, {}, {0x0, r23}, {}, {0x0, r23}, {r21}, {0x0, r23}, {}, {0x0, r23}, {r21, r23}, {0x0, r23}, {r22, r23}, {r21, r23}, {r22}, {}, {r21, r23}, {r21}, {r22, r23}, {}, {r21}, {r21, r23}, {}, {}, {0x0, r23}, {0x0, r23}, {0x0, r23}, {r22, r23}, {}, {0x0, r23}, {r21, r23}, {0x0, r23}, {r22, r23}, {r21, r23}, {r22}, {0x0, r23}, {}, {r22}, {}, {}, {0x0, r23}, {r21}, {0x0, r23}, {r22, r23}, {r21}, {0x0, r23}, {r22, r23}, {0x0, r23}, {0x0, r23}, {}, {0x0, r23}, {r22}, {0x0, r23}, {r22}, {r21}, {}, {}, {}, {0x0, r23}, {r21, r23}, {r22}, {}, {0x0, r23}, {}, {r22}, {0x0, r23}, {}, {}, {r21}, {r21}, {}, {r21, r23}, {r22, r23}, {0x0, r23}, {}, {}, {r21}, {0x0, r23}, {r22}, {r21, r23}, {r21, r23}, {0x0, r23}, {0x0, r23}, {}, {}, {}, {r22}, {r21}, {}, {r21}, {}, {0x0, r23}, {r22, r23}, {0x0, r23}, {}, {0x0, r23}, {}, {r22, r23}, {r21, r23}, {r22}, {r22, r23}, {}, {}, {r21}, {}, {r21}, {r22}, {}, {r21, r23}, {}, {}, {}, {r22}, {0x0, r23}, {r21}, {r22}, {r22}, {}, {}, {r22}, {0x0, r23}, {0x0, r23}, {r21}, {r21}, {}, {0x0, r23}, {}, {}, {r22, r23}, {r21}, {0x0, r23}, {}, {r22}, {r21}, {r22, r23}, {r22}, {r21}, {}, {}, {r22}, {r21, r23}, {0x0, r23}, {r21, r23}, {0x0, r23}, {r22}, {r22}, {r21}, {0x0, r23}, {r22, r23}, {r22}, {0x0, r23}, {}, {}, {0x0, r23}, {r21, r23}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000056040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000056240)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "b7764ee89a2057"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057240)={0xffffffffffffff80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3, r11}, {r12}, {r18, r19}, {r20, r23}, {r24}, {0x0, r25}], 0x4, "594228474eb253"}) [ 1694.638199][T26985] loop3: detected capacity change from 0 to 1054 [ 1694.672207][T26985] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 16:59:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1694.716412][T26985] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1694.722844][T26985] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1694.775186][T26985] EXT4-fs (loop3): Remounting filesystem read-only [ 1694.781799][T26985] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1694.795758][T26985] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1694.802474][T26985] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1694.830148][T27009] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1694.863016][T27009] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:37 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000204000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:37 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1694.888559][T27112] loop4: detected capacity change from 0 to 1054 [ 1694.920791][T27112] EXT4-fs (loop4): bad geometry: first data block 9472 is beyond end of filesystem (512) 16:59:37 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setuid(0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) clock_gettime(0x0, &(0x7f000000cac0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000c9c0)=[{{&(0x7f000000a880), 0x6e, &(0x7f000000a980)=[{&(0x7f000000a900)=""/66, 0x42}], 0x1, &(0x7f000000a9c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f000000aa80)=@abs, 0x6e, &(0x7f000000abc0)=[{&(0x7f000000ab00)=""/85, 0x55}, {&(0x7f000000ab80)=""/3, 0x3}], 0x2, &(0x7f000000ac00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xf0}}, {{&(0x7f000000ad00), 0x6e, &(0x7f000000bf80)=[{&(0x7f000000ad80)=""/91, 0x5b}, {&(0x7f000000ae00)=""/197, 0xc5}, {&(0x7f000000af00)=""/36, 0x24}, {&(0x7f000000af40)=""/2, 0x2}, {&(0x7f000000af80)=""/4096, 0x1000}], 0x5, &(0x7f000000c000)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f000000c140), 0x6e, &(0x7f000000c880)=[{&(0x7f000000c1c0)=""/116, 0x74}, {&(0x7f000000c240)=""/152, 0x98}, {&(0x7f000000c300)=""/144, 0x90}, {&(0x7f000000c3c0)=""/140, 0x8c}, {&(0x7f000000c480)=""/167, 0xa7}, {&(0x7f000000c540)=""/144, 0x90}, {&(0x7f000000c600)=""/196, 0xc4}, {&(0x7f000000c700)=""/60, 0x3c}, {&(0x7f000000c740)=""/88, 0x58}, {&(0x7f000000c7c0)=""/174, 0xae}], 0xa, &(0x7f000000c940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x4, 0x10002, &(0x7f000000cb00)={r4, r5+60000000}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f000000cb40), 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000cb80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmsg$unix(0xffffffffffffffff, &(0x7f000000df40)={&(0x7f000000cbc0), 0x6e, &(0x7f000000de80)=[{&(0x7f000000cc40)=""/221, 0xdd}, {&(0x7f000000cd40)=""/4096, 0x1000}, {&(0x7f000000dd40)=""/51, 0x33}, {&(0x7f000000dd80)=""/246, 0xf6}], 0x4, &(0x7f000000dec0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x70}, 0x2) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r12) fstat(r1, &(0x7f000000df80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f000000e0c0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004540)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="301800002000000328bd7000fddbdf250c01588004003d0008004200", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1830}, {&(0x7f0000001a40)={0x128, 0x14, 0x4, 0x70bd26, 0x25dfdbfd, "", [@nested={0x106, 0x6b, 0x0, 0x1, [@generic="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", @typed={0x8, 0x53, 0x0, 0x0, @pid}]}, @typed={0x4, 0x2c}, @typed={0xc, 0x44, 0x0, 0x0, @str='*:{-{$/\x00'}]}, 0x128}, {&(0x7f0000001c80)={0x13dc, 0x23, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@generic="4a5f90330df84963104c005d70703edfabf2282dde21a72b12ac443fb40365d464fa11c93f7796c2eca351f289e12d8be9645d5ddf78c3081fa63bb3805d0c273fbde4e60feb57d1e776bacd4d1758eaa2c709b90ba126f3f37a1b2dc39a9ad8258fcfed70278887914b73fe73592a7cf694351af4a3d7c80848d0ddee1a55b5c0c82e9b9315aae04e9a68e2cf02f377206a4eeb237dbdec507f3c6ebef77c28c0e67f3f2de1c6b6ce5175d269dc7bae99f611b82d2bb17189bae168a04dc5d6b6d4f4d73d84bec05453abb4f951ed05cba2edc83f790f8f588e9113fffde7c738c182cc1775aacf0e9ce56c12b4d9318f7b46e820f33b4af61397372087fbfeab479aaae282f1567dc6efaf8dcdc3310d3284b181ead00742b6663017ced55c92c75bdb4db994ed1e0ef9b842334a0266c02abfd6240065c4755407ec1eb492a0ddd0d81eaf8a635e8ec643c19bae3621cfa487f67851f26482abf73b8bbc6fda16bd63051f7e195426cbedd6f2ddd07b7ca5ab47e8e25d856d40b0e72765b8bd35be5546a7425bc8a6c24d488c23d785c0534b9c8e137b95bfffbd6001ecfaf07d536a140b31c76269479c67eb2ed5822275eedbf6a4fc85a59f536bb51f06f2228659d78ca9e69bcc3688c6805f5cfbf316f67a55d47c13a6595c2bd555ba6994c3c4fe1d450097994a391991c2f9ab15fb5c63c29baa82753a1eb9b73b534b3eeef91307e793eb7da1ef8eaa7978be0b4653bfa20e4a36182756a4e0769ae54f2eb59abc9366413c5fb400f4f3e645f974319aaed2e0f8c581ba0dc52703586b7606b308bda6573399a44f810b08a332b16b1fdfd29af2637ae4d365faf896b203b18040dc623e65df1c67796a686203449c84ac4b90c5996580f03cc741cb8c46e522deabce00d75fc99115b34f1c1a939dce0ab06202045a42ab55b3639469a66236f45ffbf24f8c4dd4b8eb8ec1fa365e0c3afe24427e960a3601c45464510fe516647d3647f9a412ac9632169b283d7bfcaf55b22e6ba925a21b352024298ea90b243622177c88295e1e4c7524b77fe742bc09957fd407093096ba82e02a55293d2a7869fbf847a4fa3466d5495df61c24c578704ecde6413c54812f4db3e383d77e62639ee1cd20a791e5423dd2176d2fa94bebf4d3505fb2e8bc2ba8c8c58ca7457de07cdd32946ee6f6b77f9f5496f9ee52b3b9ef6ab92b4a7fb6503ddd94ed11354f61e11307b19697072b1b63859b50481f18a595f6eb3cd6fc2fbdde9255199a699fbe51a7b33a3f2d02f64c1c092344704454df4ce846a8542cedf3b24c586d0ef1c8481bde598cd43338f19ddb88e6c47d9e46c8d89128c6a57f5d3c7e8a53534b0e6b6dfd14d23fd109fc56cef8c103a388aa8c3a124eef4c5a7e84233f0a1d59f1b9f2b1c5f3bbe078742b371fa0cbe11639e82a4a183df3772293f273846cffc7706ef55e6b3ca55619301fe226fe0f9b4bb3591a3b58f8d0b7cea9ceab133d8455acc19cb07c2263a95dd9abfa7609f73ef8f5fd4b4fd60097168a74a9e3853f0c69f174e26841a324294e42f00055b7fcec4caa3942f56e98679de0823e305adef964a5c23ec296909d36fc5c6c678838b8e828317c5659d1fd412eb7895b785996ebde231cf6a4ef794028f9922f20785e6ddb3e979978fc0024c6c99ba3ddf92ecef44e4b87de5813911ff360726bac1b81d852228636ea71deb7ea24295cbaad4242f98ac9e91be1e9c91b18edb18e5baac4569dcc17ef1f3479c7c1da03513ca1ed616b0adff74c8ed3a20c22b33364476529872587daab1f971a921a6e640ea116d9da372ad62ecdf198c7ea95d1a770bab3cf8db43b30959d186ef7b4aef8498b30d780364bb47dfe80da7fe7a9f7c8f7bcd5a6b10cb5820fcd12f291209c164272700755e8dad3940a29b78c493dffabf7c39396cd6254c7acecf89d5bf620b28083a0ec8bbd2c1551d00b179b1b4de5d40ff1a519671b995ffa4e35a9e04ace6a6e4f6ec600a78d1aab5dabd70c7ea70acbe4bc3096bebe08767061b5e7456392bd36ed0ff6ee7779838a0d9725784daa9e8864724624c76f554186735eb118df7d3deabc86c226d602c9bf53a6ea183f2847a77b70fb8332bad63e594196e9f258931834f84278e90b16ba503a8249418e58fd9144a5fce293d56acf11bed33a5cc01625b533055c983160373c9fc9dc7e59946655b92145e3d55503cebb42f984d98a0b0a2856a0bcf6a140e90a977b7c31feba6ff4871cdacb38d95bbdbbb29d4d1adc44d523dbaf292c7a4be72f7f66e829e9db4d570109f028fb3e9c6be79c19acc7ed457bc5bc874450b5105c0b785457ba348bd8298f5561c35db8fd61f7739b03f212161068f28c2d9edd961d406fe684517551719feb6914c880600f4b6f09e67fd8aebe5e2d6c4d02917fa6882ccf55add771b6aade6906fbca3a8c6c351801a9428133d7de793e5b86e29536d60ee8feb579af317b23553f850e3435cd3720bb98f41661db4f9dc61cd4818cd1901858be0b148de90fe81e2fd195c86cb1102364995c55ff818650e910f5c193aa88036c1e2a85f4eb0e797f9954a56774764f1ed439329463b0ad9312e0c69bc8a94084ef187bbf48dde2d66c02855c294b494296943e8dff9c21c1e742d82527c6fcdcf0b6f51e8d3b1c62c00ab690be58b7cce61feb9fc2d06cf84f3a755155dd5c8a5ee9bc70363c994141338cafa00b37320cb2a876ff598b5575d207a97f518502e02803fa132844e05006249657c058e67f7b282c34a714737824a2e23d6c3b46859ab7fb89636eb412034674b78c82c32942c1c1798454e09f4a7d114f801c43a17c810c87598829f151e4a59c0f908bcf250cdd522fd4e68fd919f2fdcddf7aa16a86c39137e32aaf92b779e18707d0388e9e9a8035616cd9701d2ddff735ead3ee9edb72df3769c98d33ac4f304b294321f3454892f992bfc29c4de2e571d3518f1071eda54697856a74dfcfc1ebb96efb2e361083602c18fa5b82ed6df046242a69a95c105bf4fc4302ef4addfa013888e75655c9dbe53e3f644bf71412d812c9f440a2918caef2d314005d5f05b32b1ae05eb01f4631bcbd658b690f00bf4ee67ee04f5a16460813202286c427a9dd90512f745f10745fb6ef4e80320eb0e7896c512872437f5b153d4fa92ab1b60c4122fb4c3f73cbbf8b579d2eeb175aecb8972385d73d524296bd1914429333530a6e0d3926371e4732c0cb2aee84e2fc6f1076f21bb034f6db4923d87da68e38ff98f21193c962d037be87cf8e5e7986e36c07a17cff9cf846a5362f883ab61eaacc1819ce661afe006341954de5c4d9759c179a871707c7f48fd36e9e7e65e9b36a600fb4c21b18113c05f8287ff7cdfbe53e1e2eb231c1e1670c9211d289a27929eb2fadfa6beabdd6ad774d4a182cbe7dd365cf49743ae4a6d9c14732e612445e58f150249e8fb86fdca99ee3f5cba7da283b93f6b23442198ed6b35296548d737d7d701cfd89e03848e882a1175fd3aede6b90c1d17e1647ada737fff4cfd2292e21946b92bad166922c06b510a0c8b15838e680b5fe4c3af7a9661d230d942e967c102cb2254a3f3d6b9a44735b560482367e0787256bc8188c82d4045d259b441d068f285999bd868f13c42b29effb22558048db6516ab7513515187bb48a5e68cf65c9ee67657f4b64ccbdc339fb75472a2f8576be3a6005025d9b4e9e652ef466e6da7e1e0e78da04d1820d06f76fb97f2de71aed08b1d8cfff9b8866b9666737f9a8ba2df0f4604c7fba57841559cca6716c4f81d6a25ddc3778d3a1f03c5655e620837d63189bf321a837522b54cfe38e7aa0904973f9d945752f1f9ddeaab9cbf0fad90c407fcc6f977c0bd36d08ed86518418ccf8325e384d9a0472a04a84676ff10e2613ec2b91011bec413ccc0ad435d66ced1c4f232b9e02a802762787e183d7263d7a407a9256c0a8c757ef1935734c5456cc50292442204ac8679e146f2673d14ba484a9b32bb8eca76c4b76086ea3d96e967b141cad06c4beb4861c94b0766bdb4da612bac3d3f536b2abec9489f35a48f6c36497f1fe6a2adf07aa9c03f892cafd0efd507d624fa5c440af7a364822a03bf0a47db51206962888f6154aea96c575aacea797f9bf37238e2731b92d147153ecf3f7e1a5044596e6a318115c55c5fff73c2875002d6369d4c7d6529fdc6a99f283d980337e083c500c15400bb45098f681d8c244dd738fc185dcd81f0149c5718ce509cf1eaa8657d894350d6173947d06ffbb0981d1a8fd3f1bbb0e3b7bb2286f49f22551c1c041ce44bd316d5aa7a62d628848804a863f56e314c7f8cf2ad57594079f97d0af3ef0d91e115fe8d5548a3aaa3f5b28af10aa217707d85c261804a8f018eb7f9985822f340bca429166e66516a991ea4232ee27e4954a1b55e417f4fb9d26eeae83beb7c6de975e1fa077bbdda76eb24e36e8130e6ab52443b52c3d965fbc03e7a4a991ffcfd40b193d3ce7205411b8bb808d73cbac554e26bacfd7235c840daff2e3f110208293ccc8b9a1bb1b90798cc116289edf96b5cb0244c77713654c57d0cba24460ae4544aed415e6972aedc1ab7de3302d04763958f61d51290e33dab7cb3e96f60005aa11e1474c9dd468673cd944d3c6e403d160a48fc35d09be380ed35faf28715417a55a07815440b691b3d048f54d7ae15480fb9281a7e66ee54ffb47ddfdc4393ee7451d00137304d98cb5526d26de481b238cc7d4aeb20b6333880a22853dec4841a905b4dc5a183b9459c80590e8e681b4827477cebc0801ca2461ff1ad2b45bc0866eb594648ecdb7b922042b2563be48d4b9dc187fd65052a61e86efa669b8fd6847f682f7284f5dbd1845d93e6a862d59d9edf502c64ec8153dfa3787a2f4396583bb188346a98c876df47a6989672160aba025367f81375d1a21219a83b4b862c229b6b9298cf74af1ea7710ea45e91c9937ed2d5366b7b0c8ddc6f28a20f8009e17105031b201e9745bbb7763f29e09d2ec40e37b5f1a54eaa1298ce3fb0d99298fe0c06392ffe535ef7b931b56ab8eea3aff6c8d069dc91044b9ae03d7d669cde75f1b66207b2cd356ef3799bacbcc4eec1ece095cb210fa5fceaa72c5221347c156806af8a24f33186df0f014a78bab2b16ae2a6a09e916f962fb908cbf271accf809323758bd4939e7e9fd89d1649e0e5d6503bdce90c74354040ac838737ef937411ef6fa842d265f3bcc71bd966860d1f280adc18ce114002bcfc16c9270838fdf55092ce009d33442ed870c3e6120e20731ca68344e4c8bd88939eedd4e531ee784b6794a6b74e655de48e0f60921e5baa0de36994ac1ce823a1782d04ced49a5d8d3e42b8c7523151934e0df23ea9b1df024a60309a4ee5f343cac4fb4fe8cba603c6542e3ca37ef57e64fc5103ce53d18446ea229969dc0d7ca2ab1758165dd2e288480f93d592fd76cdde3bae6f592f61deba9b3d966f4e1bbac0308ecc07725463606f4b133c27bd369a1e6a4db14b869dc01ee6b99b208a57eaf1d0f7bdd3fee3a42de54644440218841a8c2a356fe8232a09b36fe2118e4ceee64a181524e8063110dfe11ac1f2e4500582dab32b4527f04a6a2544b840e2ab35b44cafa2e15078982820ce6ad8453e10a3f3f87d12f2d9eef24b5e89ebe1d7ae3f59560c4f9739a486971ff86c20ea8b966c2e537e75c87c14b2b400ecbb138ec8c190e0a0e8b5edf13f0390867716cce31f01fe4a0f92215b3fcd6095", @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0x12, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x110, 0x5, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="bf8e3ddb75a9787f2682c168b463907ee098779af06078a6e97ebe4a11dca836f9abf00a16d60cc98946141419cd1aeae162b6691b22d049344602b99d5ee61f2f564380e1e82f57dad736cab7eae023871cf39ec66c8d70eb3627012ab89316a991e938a4add9c7d7cb7cf457d91f0a7e1dc326b79ae2086e7c1cc621999ce7ea9abcb8b7c72ef4fb00a74f9e1e04e014519118102f55a06da5d15810ba56c43afac2fc10a50835c97a19542dbab0ec1b9a2b4e1f4f44a6b230475065233d48186fd00a8da225", @generic="f899113a13308878d381175b281d5491831ae8156a5e9375bf", @generic="4f3be84f783df7a6d7c1430782b727ee"]}, @generic="e8cc017049d83065a78a88f2ac66f3365a9ea4ff9aa21685ea087e0a7d9c50a0a463d2e9ae427632352df6e7f504387f7b9fa8b0a94d0e507a62ea49f0467dae32841acc366700768801dc6c6abf9dedab6e55a4f22e39e7adc62e739bdcf0bae4431516936f3f1ea77adc7082798315e874d1a93b92981a49838ff389caafccfad9b4d236c345b47121c026c0af5fc7fbd6e64c8acceb3551dfe7fc5fd346e5604112fd5e26446a06027bb32a5886a8075013add08992fba0963c272e369a03dfc326df3f9910f3cb3301f9a69fec5adf2de5cd", @generic="85f87fe12942b4900f65f559152fd28865a3739bf57de9bc2a638cdc477a0c4080f0295036b74ea94dbcf54a2785fd801aae6843faba1a6672f3d53b635dead1276e7195ff7218745f76f0c89093d801ab5bd60b7c3f8a", @generic="5017455efec3ed338c2202956d008f6e713bac6c0d47c05bfc46cdc5c8de45e14ffb6eb6b2ecf0959ea0c6bcf502e37b4c3515323009af90254655f65d44a51e74c1f6ae0b0a307e1f20c5ee40c494f290abca542b9caef1554d183a9ddec99a", @nested={0x10a, 0x85, 0x0, 0x1, [@typed={0xa6, 0x4a, 0x0, 0x0, @binary="cd4ccc1d8036c1d4959efed04065991952c50bd7937366ea515ab0609b66bd3eb9c236a9795e14f2aa2bf1ddfecea5fc02c0c78ead3c7075c3650df47c15cf68e5710e4c2673dd29ea042e2d6ad66d67c0eb9895f813089b4e42cde5ba5017423d085026f85e1ab0d1a2d6086de165c1b04b9f6af30ff62b016bcb95301e54d22df55ec99423c4186bb28699892050096659180684f35f0ec2a57b3ccaafabbb1daf"}, @generic="0eabf73645327eb4efc56fae09fc202ea79dc612e3c04446e717947a1d904d2db02c5c81204bd0b749b5f4b80f30c4f246fde909f05e6f39253d405e740716ca26c040349b405517627b1610dc9f3e5fb74b", @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x8}]}, @typed={0xc, 0x8c, 0x0, 0x0, @u64=0xffffffff00000001}]}, 0x13dc}, {&(0x7f00000030c0)={0x40, 0x16, 0x200, 0xab, 0x25dfdbfb, "", [@typed={0x8, 0x69, 0x0, 0x0, @fd}, @generic='1', @nested={0x21, 0x72, 0x0, 0x1, [@generic="055f09383098e260ced7afa155c2e4d4d36b0b6f74", @typed={0x8, 0x3d, 0x0, 0x0, @uid}]}]}, 0x40}, {&(0x7f0000003100)={0x10, 0x1b, 0x2, 0x70bd26, 0x25dfdbfe}, 0x10}, {&(0x7f0000003140)={0x29c, 0x11, 0x300, 0x70bd28, 0x25dfdbfe, "", [@generic="44dad5ad110a5945e3a79f46f02abfa35ffbf6fedceaa56a4d23614155848910034c1aa4dbffcf2957194877611f5c3f714ebe1b0b1a227460d317217f8c046df25e1f37c87c765620b25d1cc2cdc2c0ae3d8d2b66314350204c285e791bd6f2a94e5ed4e63ad84d5ca659a5ad95a7360b5132a5117c6e39744a1d0b44ed7bc6c05334abd3b935c22ae5db7431b358e9b12b3b1a07df533bf604906b18babf61f2d84cea8e0d4bf00707c8f0b5a30f6e2a12f95105", @nested={0x1d2, 0x8f, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @pid}, @generic="2b8f93f21a90d28d2965d9fe95a7a12873af3b41a36f", @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x5}, @generic="8bd6a942aad4ccdcee3bb2a4836be9354b91c2b2cd4984dc95370764da92d2ad2b597e393b8e1c43a050977c2113cba84e14153a3acfd4b1a31b028560df147131cadcd033f28b2796d3ff66f27202192abe0bcf7d587f93c2704300f44ca6f826209f99cb00dc3eea2ec9b5dfe46b8c45903f2861924120e46b4009e7", @generic="1322bae2aba2ee799efd4790b22dd632f7584073bf2ddc685d12370f0e8c0356cf9aaa117be8f2de2ab53a6fc3a1cecddfefa627fcf5fba5eb3193a49e7e0f7cd6bb58d0dee52026cee1014e670afba803bebea3416ae9ab73", @typed={0x8, 0x7c, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x6, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x62, 0x0, 0x0, @fd=r0}, @generic="e165d900268be7a8a28cc2aad2cbafdc55c42816a94d07eec6879556ceb0a641282d994e446d803614c26632a954071f9685da594edda4bbd3d8b54865ef65f7ed63123aa46690c4ae89d5f8b1d8f3e293510ec36d971d540b4d92899fc66790c38ba43b39e02ca5a0854eb9afa7d294ac", @generic="6dff0f1b08b65638725c991b0207e160c85d1953aad4a136050f7abf00c49acfc67c4aff8b84e223082cb76dde3ea9a11cb7e1a0a107f2ee19074d2042d3e7a5f349057ade"]}]}, 0x29c}, {&(0x7f0000003440)={0x10d0, 0x3a, 0x100, 0x70bd28, 0x25dfdbff, "", [@nested={0x9c, 0x3e, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @pid}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x1f}, @generic="83dd371fe5199dd5bca713b35c2c2de94271db54a53c3f227e9915bfbca7ae3be8c9550cfd7faf23a56ecd7641ac52109bdb67da1cc6c5a677d456411e0e3110ccba400076570a133098bf218a748ac12c172ea3fb74fcf8e7ddfbbde31effa31ee0ce448cd15c4db96b2d", @typed={0x8, 0x18, 0x0, 0x0, @pid}, @generic="8d2f7834c7c30bc5adeeccf511", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, @nested={0x1024, 0x94, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x25, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x4, 0x8f, 0x0, 0x0, @binary}]}]}, 0x10d0}], 0x7, &(0x7f000000e000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c050000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x8080}, 0x0) [ 1694.971923][T27116] loop4: detected capacity change from 0 to 1054 [ 1694.987297][T27116] EXT4-fs (loop4): bad geometry: first data block 9472 is beyond end of filesystem (512) 16:59:37 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000002e00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1695.093463][T27132] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1695.107226][T27137] loop3: detected capacity change from 0 to 1054 [ 1695.128103][T27137] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1695.133094][ C0] sd 0:0:1:0: tag#4331 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1695.147255][ C0] sd 0:0:1:0: tag#4331 CDB: opcode=0xe5 (vendor) [ 1695.153604][ C0] sd 0:0:1:0: tag#4331 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1695.162674][ C0] sd 0:0:1:0: tag#4331 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1695.171766][ C0] sd 0:0:1:0: tag#4331 CDB[20]: ba 16:59:37 executing program 0: r0 = memfd_secret(0x0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000003700)={0x35c8, 0x0, 0x408, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3e}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x300, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2f0, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2d4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x5d, 0x3, "9446b07490b1dd9e5f4e931792456453d193c598e9b376ed14deee11de02406f3cda77d9f9e64cf864eb22375332aa727d3016e9c3ede70f3ebae98fdd4eb873d81212a3cf268dcdfee8ee21179af52292e3d270f358f67298"}, @NL80211_BAND_60GHZ={0xaf, 0x2, "eb58160c5e7f0cfdb17429ec34b342dbf0ef26eec06078533c79c7458fb95c4ad5810b1f09882702cac0bca76943ee0c79d8a96478ab731c240e4d2c45b997789557d11c658d3d0cecc3b7ec4a684f638a52d144af88bc78cb75233489f3ea070b9831d73b41892826e9e6ddb36621a9b31cca754fe41166075ab5a53c9e67abd34ba4846ed25565e66c9a3d2528516d30389335dd4f1f95c165646fefd0d56131e63a3aa2afc3ed30c9b1"}, @NL80211_BAND_5GHZ={0xba, 0x1, "9e9072c65c5c4a7bf97841fda6467aa79a1947866f9acded6423f264f3cf7962255ad6efc0c7d49d6f848f04c5d0f7a20b1ba67db106313bbf1c43acf328549cacbf043b030f8425fb4a3064c68813eaa39a5f932f99c20003537686446da58cb413b1650967b9d95d523299a15d85e01b5de67e739ea2fdfd23b4cfeb0e03ee8a637de6bd3c61941cd56482b0c8aaa75002965f23f6f1d8a764528534248346fe8c55f1e9673cc4e9c3b95f34f41e71df5c5069df47"}, @NL80211_BAND_6GHZ={0x102, 0x3, "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"}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x169c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x94, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_IE={0x75, 0x2a, [@perr={0x84, 0x6f, {0x8, 0x7, [@not_ext={{}, @broadcast, 0x2, "", 0x42}, @ext={{}, @device_a, 0x1, @broadcast, 0x1}, @not_ext={{}, @device_a, 0x4, "", 0x25}, @ext={{}, @device_a, 0x2, @device_a, 0x1b}, @not_ext={{}, @device_a, 0x7, "", 0x9}, @ext={{}, @device_b, 0x1000, @device_a, 0xb}, @not_ext={{}, @device_b, 0x9, "", 0x35}]}}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfc}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1600, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x68, 0x2d, 0x0, 0x1, [{0x1f, 0x0, @random="f3cea254834e57c3eeda1fb7aff8af9d956efdfb94a6ba72402e9b"}, {0xa, 0x0, @default_ibss_ssid}, {0x14, 0x0, @random="30908fd7eab6a3247a1a6ddd4f7dd95a"}, {0x22, 0x0, @random="3cb7c07503217098c927f0006b7e4c8f4f853081e687b6f2215e05a6a1f2"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14c8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, "74ac7ccc9108b5ac71057deaeab6163e2930232ee8c8e7ea38441d665d4fb4832d9acca77337523d18a7726d8dd74c70"}, @NL80211_BAND_2GHZ={0xc6, 0x0, "75077ccc952a4b4f0211dfbd0f49edbbd7429c88d452938c44e46f650b48b967af76bcefa03be8a154fe2af6deaab0fc078772ef811eb7787b56e6553f8c25fe8bd0df8b2ea85a73e264cf52aaa4f004ce257e61d9db9a43743d69c50630f491c15b5de1b371dbdd8caa76d6d88a6518bd744ce0667f6247f1922e88d6fdf0b03f00523c5b248bcf9ac5ec0b76e4940c701ae8e1150df90a33fc49ab50fa6042a5055e3741d3f1dbb8bd4b9bd586f48ca73ce5982a0132b227b8e9fe66e8689819d5"}, @NL80211_BAND_6GHZ={0xad, 0x3, "404757466f00abde215add634810efcfdb054ade3756c326f46f8c81e0daf5d58b142541e11205df3589fa1c53b534790096b6b15d9f8e7949ad5433e5e7c2dbd6fa5f1a9b1702e871d5e4f825501959ccbdb604eac57864085a7a87e73577e74f3843b48a1ad06faad62344ef9f858c87a5c030f2bcfe20cef390aa39e1e43a57b5aa1c9696905b79d7558041ab63e451800c150dd290754a4f6ac90531682c5a78f11613920a2151"}, @NL80211_BAND_60GHZ={0x34, 0x2, "91cefcce009ff591ec5efbc77a50424c8d20ee62952bc15ee5a2317cb45cd47aaf5f8bfd48b3d2982013793fbb5713d3"}, @NL80211_BAND_5GHZ={0x9b, 0x1, "4accb79ac907453a7e100c8929dd3f6a78db78dbff00d37249b9e2aad7567f6c64e3fc3fd447d7d1d60c1cb49dd9c84c1aae1b9c268b6ef320faa673007f644b14a641ff4fcff947cfe866cac7cce5b7e4337578ffb1eb1cbe338109501ce7324327456c6b0c5ad986dafde61208e2ba82bd4021eae169c481a26789416a32d07bcd2e117a5ff872d2eb8e26786966e372e3b759e21a41"}, @NL80211_BAND_60GHZ={0xb8, 0x2, "408dd765f3515de69b0317c7b931aaee3f8164f7580563f5a3ebab8dfb65f6303e1b5efa8d68b8e6d83f1b98beac10cadefc5fcdf9ba980df16dcebf998490f9f2adaa50f19873d0ea489807bbc7e40644a22250c0e9b681bcab5db6485c132fdda7eca4d6674692da1896f257472616dc170f8bdb8d12f8abbbb6165b9db7ffffb6cacf9098ed27df6753d591ab74d85f2d7c5d1423fc9110a3fc5ca5a6e1a0a94face1261e358507a07cec2b2ea3bcabd05fab"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0xb3, 0x3, "c6b126354d784d76d46fa00de51d98394e984bbfe1e02fc93a9df6543033a05e39023103b385563f3e559e51566710be8703a2161d233c93fd0584ead1dacaa65e70afb8eab45eb2a86811b40d4e869147b8c359c0d09c5a51fa7533f57c555035202934a07ccfea1e8fffcdfad95f78008dd64724ec40ff486e8d925097917ab5cbf35dedb7add7cc91f29a079e259fdd9302629b19ae42b1f003975798920646026b73526c45e1117057ede5f248"}, @NL80211_BAND_2GHZ={0xd5, 0x0, "2a0a45f0841c25fd2d2a276e91013bc2b8a388984ecfc9cfddc0774ad339bb4cd8af447b47c36862ee71cd2bc030cfb00266642c6a7c9de6940baa6edfc1037b5700495d019d773879e79e1a9b9f136f131b978e72721831baed590b874377da52f936165dc0c3c9f13da0431539863acaf63fd0fdb75971edffbadaaf1bfbfac38f851dd0e4354f4d4096f9bec70957ebf0440424330e34ca5f3d039f0c4c6d4b52bb6c850647921b0d882fed5c8716476bc36d91492ef8ef53abb0201168bcdcde3385db84cd1f14559c7772cac24191"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xe4d}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x2000000}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x22, 0x0, @random="b1a6f38d2b396270edd0f24eb41e24eed9dc158a0478546d819ab93206e8"}, {0x14, 0x0, @random="8d4a4d9e71b5aad67ca448cf64142107"}, {0xa, 0x0, @default_ibss_ssid}, {0x9, 0x0, @random="637be3c39f"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2c8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x1}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x2b0, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x7c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, "da3530d2dca01a89e7e67d247ffdff19fb13f495b9d023ba3f464a8ce045cf4f0b7a93d85349089b912d0b6a"}, @NL80211_BAND_6GHZ={0x47, 0x3, "b2a5302dd090713694c99c8f2952fdca2744128c211d9cfea2ff83184758a8a8db6bbf30b8c57d3def9ac16a6583428fe87d4597069080618faab36fedc69b45d2728d"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_IE={0x213, 0x2a, [@measure_req={0x26, 0x16, {0x4, 0xff, 0x8, "9bf5f5bf8b581c2bdc6384ae4dc19871aa71f7"}}, @fast_bss_trans={0x37, 0x13a, {0x8, 0x9, "f5ee6cd658e019c2c11ef3775ce0190b", "f81f72493962bf48081fc9a1f68a643d454c1e4d072ea2e1f73b4c35ab761ccf", "a0afabbff0d885ecd05cdea2cb99705b00e7075e85e0a318bc57676153293cc9", [{0x4, 0x21, "c6cc9b6723e0d3d7c229a4310e4ec672319858dd70278b9905f9654c16e227881c"}, {0x4, 0x16, "15204e965e55513e394d4d14c74f7814f771121fc4bb"}, {0x3, 0x17, "42808297023bdfc2854bb05775cb585d689190889b79c2"}, {0x4, 0x12, "d9b424f040df18e8fedaf0316123fe0026ee"}, {0x4, 0x8, "23a3b60a85793c07"}, {0x1, 0x28, "0566cd26631651c5c656f2525fb1acd2f35ad4bdef3c19218d5857f7b42bd09a6be90b526e8c984f"}, {0x2, 0xd, "cd1a4bf7e5d7fe7f2535d8b27f"}, {0x4, 0x1d, "071d54f48e54eda7f44efb893a7ae3821ab976524fe95cc89f5b2bf1a1"}, {0x2, 0x1c, "62ac7dd61b522746063382ab2a3ca09d451eed3dc43f9820c12d3735"}]}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0x8a, {0x6, 0x4, "3f2f3b51cb77b99d230d367604276068", "a5ee2da1e5fb64d60f3ecadc52ff987acc3e94762cbc0b037cc592fae4561127", "2460eec3cb22f9920cfbc3a402cf38f7d695700ce979701085fafeb3285224b9", [{0x2, 0x14, "9eea6afb5fb260e4fc38fa07205f255376cf3089"}, {0x1, 0x1, 'S'}, {0x4, 0x10, "61ca4541b8aa3b1b89a7f2974d5d29d5"}, {0x1, 0xb, "bdc7d2f873f475e4c130cf"}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x80, 0x3f, @broadcast, 0x401, "", 0x5, 0x9, @broadcast}}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x80000001}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x16f4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x1504, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SUPP_RATES={0x1288, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe6, 0x2, "48f8a833d80dc65fd713948ca4faa11ebdcd2216a368b196ccfaef11a19f7ba4ca891b0406a8c415e973a4502b00ddbb5e3e8f9a9541682f685bd5d22bdbd42ef518ef878d35ebc24b23c6bd254d4a76c71fc336d8953ec86533eafc0d9198512ceb7df6b59cc4bebe45b878d5f1abd337c21932f989a3e2513057683c7e240cf674dde5596f7ab3441ba8dc9d3e87a71986f69c5a577f90855b33ab1f63ebd2ad29ddaa3cc508159c942a2d9927fcd411981ad8e1617b2283ddfeae68f60fabff50281a265689edebb2f4f907a7043596d6c842479ef9d52f9c219287f48a59655c"}, @NL80211_BAND_2GHZ={0x9a, 0x0, "f38a8a1364ccfac5cb063ebe2714d5009d597f31d7832814ed122651a15754f9d6b33c4b3ea66826aae754d4257a11365aabafb2c040bf04cb3aa43d68cbaeb8ca4fa51a4d413cc1c2b7c6df449fc8854220a9869eec32e4b597b99d17787fea1d4c54cdbb6b0b0f7fc18fa825b04222384f4a2626569dbe1cb64c641bd3fa15d7a4fec74e0d2a131d6b7ff42271a7c83b83d7b35c2b"}, @NL80211_BAND_6GHZ={0x42, 0x3, "93e84c6e054ac36364ff2227db2e6cb47bca7c642cb42c2ed79bf2b0f93d3fc81f9d65ce1a53e82ac9bd4d56ce0cdb3e8f39fd031cbcf3508010f62d5dbb"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_6GHZ={0x84, 0x3, "c7419186318bf26fafa33e3e57a66873df85100a925b1508d8a198f68ad334a53c815fd668f240316df3968382205fc86bad80f878c22fb72867b0b40fd036464520c34578d8395ad5a2a92229b752f44ad13d83dbb512711d2aa5f9aefe676a749ae47acc0197240c31fa3455c07308bc7e804e687e0fd992449d552a585f5d"}, @NL80211_BAND_6GHZ={0x32, 0x3, "9b1b8187522897e9729298cf95e98582f5e210d211b2b2dd8c5dbc0b887b1c03dc9982602986a3816c526538200b"}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SUPP_RATES={0x254, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8f, 0x2, "96b0a8ff9ac68609e222f8a20ceb80a71a698bdafb503b2bfe3a8e6c89151c1c930d33a1e57ff9c3db970f0fe708afe5bcba34e9a341aa486f6e89e8d5b13aac43f189fc5266dd0daf8d8b47fc2bef92efaf07d735f9d2d7ba585adb679b437bb0f7c5ce344b3e4d8e3f7bc8375fe2cfa62c71d04cb42260b8c8c567877f2b5d07c05408dd6bf442c6d254"}, @NL80211_BAND_2GHZ={0x167, 0x0, "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"}, @NL80211_BAND_5GHZ={0x57, 0x1, "e60abf387fc9867c471cd4c2c8aa1a33a1d2749b2a18dd5dc4be5d709abc5d4f9426fa93af7fa9b138753a980b8b51339b78aaca239e7128c6b297414f6d7a14c105a45ba7a5f4df7428bd763b7e00f83b55d2"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3000}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1ec, 0x4, 0x0, 0x1, [{0x140, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_MASK={0x49, 0x1, "45b74a78d34799952e23d9b30fea346a910ccc7f8248f66b2cad23e0592ea3637c72575702e9678868abc289f1a8e6350f3ea0713f15619204b27a57abb943f2fb37766724"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_PATTERN={0xdf, 0x2, "d098ebd7a32543f419c05f11d372e076e26a642c6f1be77823a78b95363c5f5ba932fb3b94c8ebe6dc72f315724db6cd61c80c9198987ece50f46f6892116116b2f90fe0ec69ab4e2c1015b2a5854dddf66abb81c9e6ecb7bf3ae91687231a520015039ead5ba452464906cd22d2c2ef8df224436ec5f5db032bbcc0a06ae1b18716d81634a8f6e298698415502264984702d98cdee85bf27bbfda362d7c7a808968e9fbee6a626a105df74dd8fde09ea6d85e1cf47233dd38bed82a37ab22c4fa065f8e95c11eb5c96316c1696363e487d8dc235d067029d3d71f"}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa2, 0x2, "e74b7b68b5627933e9319e5939057ce8122f0f8218ffc2205ef07a3c3a78001b43563b4b11889baaf6606eb0e77e077a34aa881ae483448da0f6aeba0d706d01c8b197ef9de90450548d3fa79f1780f5965e67e8f6fe3e98d9e4a4ea9b43766af04b06bc57d24c9a442aa70d3fcbf6a005cd5a3c20b9e3996d6a50d7ae3ff2ed7508fc1e483e2a418d0cda46802b4c3b2ab8086cc877b62fc6dc2b9d5b3d"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x234, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_PATTERN={0x20, 0x2, "04d13f1eae04b8e8ead6ac2c2fa72eaf6234ee22d0681f1b7e945d8c"}, @NL80211_PKTPAT_PATTERN={0x26, 0x2, "3bee3eccea1faf89209c748d59c5761a07fd5eb0fd4507d8a9694d83d30e2f3f1d09"}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xfc, 0x2, "dee93427578ae24987e7c0fff74db0a374f9d5ad8b3a8998831e148ff4fe7ebc00aa84a710b612a239f13ad04f4cc84e1adea488c1d7c7053352d4ee1ffb3ff8166e1ce4fae71b9b318d557ae34dba3cdbae0dd5ed2ca4aadd7566a1e9b60c41bcbf142611957a5fdeea03e6943ef3a9edd662e94b38429d52c78d5b36e6603cb01f15844b7f212bece17ffe5831acb18d8b1ee93164f32b276df9e430fc3936608b7e374c3cfda379f874daeb2843ebb0fabb541fe2d9adba65e76690d92e7c8463c5fbb3d788331a090b4e6ff42e09330d97be266ae1ab9e4d98f915e6f582cc8c4ac68c4c4b3619c21c8f27c775d3aa4e37a9f73fbc36"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffd}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_PATTERN={0xbd, 0x2, "cd1c3cefa4502b6201475e967cbfdde32e5513e02128f3efec11b708462e4d388439e8bcb4b793ce11645a502a4a8c86404f3622fac30ce94fa1dd49355dd0e3be0090a3c66c14cb9edfbe2e4c289e5a2ba9dc77be6ddcc98eaf2ec9f3e1915524c1b156728dfa8b799e76c4e88a7fd9372057c6aeef088f14eaec0bb80343262c335024e3de879fdb0e864ee94e2fdfeca37b0027e650ac325569fb05be767d65829bb53740b905755aa9be5106898481b61b77a3a24ecc0e"}]}]}]}]}, 0x35c8}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x4000040) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x0, 0x80000000, 0x2, 0x0, 0x100000000000, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) unshare(0x0) unshare(0x60000c00) unshare(0x20100) unshare(0x400) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 16:59:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x100) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000000004000000000000"]) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa00) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={0x0, 0x8, 0x0, [0x0, 0x0, 0x10001], [0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) mount(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000040)='bpf\x00', 0x1482010, 0x0) [ 1695.193485][T27235] loop4: detected capacity change from 0 to 1054 [ 1695.223980][T27137] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1695.230432][T27137] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1695.260472][T27137] EXT4-fs (loop3): Remounting filesystem read-only [ 1695.267117][T27137] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1695.281156][T27137] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1695.287840][T27137] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:37 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000604000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1695.320884][T27235] EXT4-fs (loop4): bad geometry: first data block 11776 is beyond end of filesystem (512) [ 1695.387797][T27257] loop4: detected capacity change from 0 to 1054 [ 1695.394653][T27257] EXT4-fs (loop4): bad geometry: first data block 11776 is beyond end of filesystem (512) 16:59:38 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000003200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1695.533912][T27268] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:38 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1695.591441][T27268] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1695.610924][T27275] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:38 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) unshare(0x80000080) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x78, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x81}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x801) write(r1, &(0x7f0000000600)="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", 0x200) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x80900) perf_event_open(&(0x7f0000001680)={0x4, 0x80, 0xff, 0x61, 0x0, 0x20, 0x0, 0x5, 0x4000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x81, 0x6}, 0x0, 0x8, 0x7e, 0x5, 0x5, 0x8000, 0xff, 0x0, 0x80000000, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r4, 0xa) sendfile(r1, r2, 0x0, 0xef85) recvmmsg$unix(r1, &(0x7f0000001440)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000480)=""/96, 0x60}, {&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/95, 0x5f}], 0xa, &(0x7f0000001740)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000000000000003d34af545ff459b04f5cc6334980100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/57, 0x39}, {&(0x7f0000000a00)}], 0x2}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000001080)=[{&(0x7f0000000b00)=""/245, 0xf5}, {&(0x7f0000000c00)=""/51, 0x33}, {&(0x7f0000000c40)=""/103, 0x67}, {&(0x7f0000000cc0)=""/1, 0x1}, {&(0x7f0000000d00)=""/221, 0xdd}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000ec0)=""/87, 0x57}, {&(0x7f0000000f40)=""/90, 0x5a}, {&(0x7f0000000fc0)=""/155, 0x9b}], 0x9, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001180), 0x6e, &(0x7f0000001380)=[{&(0x7f0000001200)=""/247, 0xf7}, {&(0x7f0000001300)=""/121, 0x79}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000b4fd000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000725912d49a883ef115415f5a791bcbcc5576926ac8acc247b4ed1b3b5145e2a2bc51e767bf2fa36ace95ccf80db56a759c84f3bc0e481b20ade52384f21b161da6ece9b3b2bcd954de99436910059c91aa0510b8be03dda856dbd2782606ee4a8f0cc54fd7cadc737b7d68dc84c566a8ba4e37d41fe735c3fc71691b18caf0ddd70f2999736d6eeee86b8a976d6a2f26e1b679", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x70}}], 0x4, 0x0, &(0x7f0000001540)) [ 1695.655385][T27284] loop3: detected capacity change from 0 to 1054 [ 1695.684128][T27284] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1695.695828][T27284] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1695.702250][T27284] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1695.715424][T27284] EXT4-fs (loop3): Remounting filesystem read-only [ 1695.722035][T27284] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1695.731883][T27292] loop4: detected capacity change from 0 to 1054 [ 1695.736107][T27284] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:38 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:38 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000005000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:38 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x20800, 0x173, 0x8}, 0x18) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5b, 0xff, 0x8, 0x8, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5a7a7556, 0x0, @perf_config_ext={0x101, 0x3}, 0x1008, 0x3, 0x2, 0x3, 0x5, 0xfffffffa, 0x1, 0x0, 0xfffffc00, 0x0, 0x7}, 0x0, 0x6, r0, 0xb) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1695.748999][T27284] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1695.775428][T27292] EXT4-fs (loop4): bad geometry: first data block 12800 is beyond end of filesystem (512) [ 1695.836701][T27398] loop4: detected capacity change from 0 to 1054 [ 1695.843604][T27398] EXT4-fs (loop4): bad geometry: first data block 12800 is beyond end of filesystem (512) 16:59:38 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000003f00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:38 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1695.914336][T27404] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1695.965324][T27404] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:38 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xe9, 0x18, 0x4, 0x20, 0x0, 0x3, 0x411, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000180), 0x9}, 0x258, 0x8, 0x2, 0x6, 0x80, 0xdb, 0x7f, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0x3, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x111040, 0x0) [ 1696.049448][T27521] loop3: detected capacity change from 0 to 1054 [ 1696.076151][T27521] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1696.090709][T27521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1696.097159][T27521] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1696.109070][T27521] EXT4-fs (loop3): Remounting filesystem read-only [ 1696.115671][T27521] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1696.129673][T27521] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1696.137662][T27521] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:38 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000006000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1696.192927][T27532] loop4: detected capacity change from 0 to 1054 [ 1696.231877][T27532] EXT4-fs (loop4): bad geometry: first data block 16128 is beyond end of filesystem (512) 16:59:38 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1696.281390][T27539] loop4: detected capacity change from 0 to 1054 [ 1696.289177][T27539] EXT4-fs (loop4): bad geometry: first data block 16128 is beyond end of filesystem (512) 16:59:39 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000004000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1696.523853][T27652] loop3: detected capacity change from 0 to 1054 [ 1696.545406][T27652] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1696.556823][T27652] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:39 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000406000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1696.563260][T27652] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1696.576595][T27652] EXT4-fs (loop3): Remounting filesystem read-only [ 1696.583155][T27652] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1696.597062][T27652] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1696.603661][T27652] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1696.685191][T27663] loop4: detected capacity change from 0 to 1054 [ 1696.716572][T27663] EXT4-fs (loop4): bad geometry: first data block 16384 is beyond end of filesystem (512) [ 1696.750744][T27676] loop4: detected capacity change from 0 to 1054 [ 1696.760107][T27676] EXT4-fs (loop4): bad geometry: first data block 16384 is beyond end of filesystem (512) [ 1696.771098][T27679] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:39 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x406, r0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x80000000) fcntl$dupfd(r1, 0x0, r3) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 16:59:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:39 executing program 1: io_uring_setup(0x28ad, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:39 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000014400000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:39 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000780)={{r0}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x3, 0x80, 0x9, 0x2, 0x4, 0x7, 0x0, 0x1, 0x4, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x5, 0x2}, 0x40148, 0x6, 0xffffffff, 0x8, 0x77c, 0x5, 0x401, 0x0, 0x6, 0x0, 0xfc6}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1696.916088][T27789] loop3: detected capacity change from 0 to 1054 [ 1696.941974][T27789] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1696.952874][T27789] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:39 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000007000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1696.959252][T27789] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1696.971170][T27789] EXT4-fs (loop3): Remounting filesystem read-only [ 1696.977682][T27789] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1696.991652][T27789] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1696.998559][T27789] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1697.095227][T27804] loop4: detected capacity change from 0 to 1054 [ 1697.122661][T27804] EXT4-fs (loop4): bad geometry: first data block 17409 is beyond end of filesystem (512) 16:59:39 executing program 0: perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xf7, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) write$binfmt_misc(r1, &(0x7f0000000000)={'syz0', "02d48fef5e9ff19985a5c873ae7de7481ea52d8a05571888473128909c587850ea330669e2ca0591b72aafdb9353c1d387948201131b4be3cd1464126d066992dc5cac9d93f83532"}, 0x4c) [ 1697.164906][T27891] loop4: detected capacity change from 0 to 1054 [ 1697.190246][T27891] EXT4-fs (loop4): bad geometry: first data block 17409 is beyond end of filesystem (512) [ 1697.207321][T27929] loop3: detected capacity change from 0 to 1054 16:59:39 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000014500000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1697.235280][T27929] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1697.275100][T27929] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='trusted.syz\x00', &(0x7f0000000240)=""/4, 0x4) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0x5, 0x32, 0x0, 0x0, 0x0, 0x1880, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x202}, 0xc031, 0xd112, 0x401, 0x5, 0x8, 0x1e, 0x1000, 0x0, 0x20, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x2) [ 1697.281577][T27929] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1697.295864][T27929] EXT4-fs (loop3): Remounting filesystem read-only [ 1697.302474][T27929] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1697.316437][T27929] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1697.323035][T27929] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:40 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000009000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:40 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000180)={0x7, 0xfffc, 0x3}) splice(0xffffffffffffffff, &(0x7f0000000080)=0x401, r0, &(0x7f0000000140), 0x4, 0x3) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) splice(r3, &(0x7f0000000000)=0x1, r2, &(0x7f0000000040)=0xb6, 0x296c, 0x1) [ 1697.641255][T27959] loop4: detected capacity change from 0 to 1054 [ 1697.665955][T27959] EXT4-fs (loop4): bad geometry: first data block 17665 is beyond end of filesystem (512) [ 1697.677278][T27964] loop3: detected capacity change from 0 to 1054 16:59:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xa}, 0x10001) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xa}, 0x10001) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'virt_wifi0\x00', {0x2, 0x0, @local}}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, &(0x7f0000000140)="edb898e7f85cf9318672f9f1269db617426578dc78b0923725e3c9a8d3a6424bcfaeb901ef5ea73409ddc0175e37c707c91ba76f4a576e78cf6cf7201ba0a3ac415e00852a934978adf685b0dd9e207c217544dcd0b46adfdfbc40dc63084d002e05", 0x7fffffff, 0x0, 0x0, {0x2, r4}}, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1697.721906][T27979] loop4: detected capacity change from 0 to 1054 [ 1697.731535][T27964] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1697.733383][T27979] EXT4-fs (loop4): bad geometry: first data block 17665 is beyond end of filesystem (512) [ 1697.792763][T27964] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1697.799157][T27964] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1697.812909][T27964] EXT4-fs (loop3): Remounting filesystem read-only [ 1697.819531][T27964] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1697.833540][T27964] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:40 executing program 1: io_uring_setup(0x28ad, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1697.840241][T27964] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) unshare(0x40000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000240)) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)="d70f53216a4bf65d943dc0bb978ade338184a3867c054c8fe29de2dad61004369dcf565507df1de760ea0f5464b64043852240d73448fc743addd3f8030673e40ca9bbfe9ddbed1db74855057c0ef4ecd376fca1698a203b819d66cc46e0793935ffbada5856e304e4a2829bc91b00acead9d32db5adb780b6fec6ca439812e83a3684f443823b09e12ebfda953cf6e1ffd254eb9b4cffacf68f24b0fba61a66b10883c5f7083d134436ecc02e6c9618d59c1d47e3bc7a88f4ce216470582d7976c4525fdd0b7c658d", 0xc9}, {&(0x7f0000000000)="a678180f3736ab46aef319042683b9aaaf1a0443cc9e9f1adf882c38ee3783d5a71a2304cb831d64f2483ac05e867595690a9369694659215cdf8128547b293446ec03b1980530538b28267869440c3b817245deebcc3fc247bd2db0d22c18a99eda64bb70f98e2a4b3a6cf6eca7c27035176501dbfe1ae31415d153c4e346cce66d413492de149833ad577fd6c826cef7cbf283a464e8aba5c196a0c7017bd2aa", 0xa1}], 0x2) 16:59:40 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000014700000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:40 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000a000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:40 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000200), 0x8001, 0x830001) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x7f, 0x9, 0x0, 0x0, 0x7, 0x80004, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x2}, 0x4000, 0x401, 0x5, 0x9, 0x4, 0x3f, 0xf001, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0xf, r0, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x381a40, 0x12a) 16:59:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = getpid() r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000780)={{r1}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfd) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa3, 0x2, 0xff, 0x3, 0x0, 0x100000001, 0x80402, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x42000, 0x20, 0x0, 0x4, 0x3, 0x435, 0xb95, 0x0, 0x1ff, 0x0, 0x3}, r0, 0x5, r1, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 1698.185810][T28216] loop4: detected capacity change from 0 to 1054 [ 1698.208302][T28216] EXT4-fs (loop4): bad geometry: first data block 18177 is beyond end of filesystem (512) [ 1698.226115][T28220] loop3: detected capacity change from 0 to 1054 [ 1698.238386][T28225] loop4: detected capacity change from 0 to 1054 [ 1698.246412][T28225] EXT4-fs (loop4): bad geometry: first data block 18177 is beyond end of filesystem (512) [ 1698.264762][T28220] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1698.298215][T28220] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1698.304777][T28220] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1698.327102][T28220] EXT4-fs (loop3): Remounting filesystem read-only [ 1698.333638][T28220] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 16:59:41 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000004800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:41 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000b000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1698.347858][T28220] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1698.354497][T28220] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:41 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x30010400) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) unshare(0x8000000) 16:59:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='efivarfs\x00', 0x23000, &(0x7f0000000200)='\x00') [ 1698.567087][T28355] loop4: detected capacity change from 0 to 1054 [ 1698.585481][T28355] EXT4-fs (loop4): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1698.622152][T28360] loop4: detected capacity change from 0 to 1054 [ 1698.629193][T28360] EXT4-fs (loop4): bad geometry: first data block 18432 is beyond end of filesystem (512) [ 1698.655232][T28366] loop3: detected capacity change from 0 to 1054 16:59:41 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000004c00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1698.681277][T28366] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1698.729289][T28366] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1698.735712][T28366] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1698.756012][T28366] EXT4-fs (loop3): Remounting filesystem read-only [ 1698.762609][T28366] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1698.776564][T28366] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1698.783227][T28366] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:41 executing program 1: io_uring_setup(0x28ad, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1698.930593][T28462] loop4: detected capacity change from 0 to 1054 [ 1698.948585][T28462] EXT4-fs (loop4): bad geometry: first data block 19456 is beyond end of filesystem (512) 16:59:41 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:41 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000c000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:41 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="0b4099084a43f2945652884de9f3bf01b95625e8bc1041059a583d10934604daa6ee02b182cb3afa2d4f45e7e796122d441c04362881", 0x36}, {&(0x7f0000000040)="d04ac151a613221a0d94888cd3", 0xd}, {&(0x7f0000000140)="30c8c713d65ac510f0482982d7c601b5c5d498eafe99ceabbb279a4687c8d3a86d7de3c1a7111b31f5d54038f796fbfe2e702c126eeca68de0925f67685dc037182643bdea4453a8373afe319a731542431ce05ddac70a38015dcc0582356f44a4ffce1bb2d28972681cdd8f1a005a79ea631ff1917f83b828dd0015c58e6178d52d747b1d5414f8b1cc515757c02efc2ffb054fe42b950fb650f9527a790ad51a7cf490ee7c5c1fc7e9f4bf8e50d703f3c456ccf9e706dc58f59a5e45eb5dfca91f1ab280a54b104607675b7e", 0xcd}, {&(0x7f0000000080)="8ca0200b62e7f8bcd79aa5d0f490bbd88589a12fda17467dce8cc39a0b630b910234768b62156dedb7eb0e84ced98b604ca92c2c8e75c817db6c02d999ad13cf", 0x40}, {&(0x7f0000000240)="21f3b7e43498f1bc8a460dd217704325ad5281e5d6a5cfd396d44c62e15f3803dafeafe211baab50b61ac4bdf47156df47d106ffc0f9c0dd65d75f2ac4aa29c7a72ca10e6426e1af80d5", 0x4a}, {&(0x7f00000002c0)="093641276703f76a677a4dd789ea5b45ac0ddd986b62bcb0210c82c4acad4dcce328141593a3c6db8bd5a27174d1e22aea6458d528f3a3451bc602de38db2abee935af1b6002fd7c9a6d5371bd67d1c5d2ac1b9bb286cf67c870c49f172353e7232888e53b52c12826806cfbe7a8f3cfe614abbcf8e5590d41687cfdecc136bef193c55ad684f49ad7fd4287e4ef275e01c035c8e009543cdf49", 0x9a}, {&(0x7f0000000380)="646f46298534951ac31494f6fe680f4d458f476530fcef81c48009b0e4b645cb2e046558801b3ee1f5713b5981adcccb4ca72b5480d76bb22d28d3d956519ed1cf79b226461f9aec2cf3fe16f0d3d18500d28e3f33a7855af4210c54824db1a0e32d5b8d723d9e01f1b2feac4f638747d620826fa12040c036aeb39202c0d59f5d93c9c38fcf85a98694b2856144795ba8ac7c3d0f3b83013a30a66eea3c0bce3408fa512d224319", 0xa8}, {&(0x7f0000000440)="7f19f79d514e1d6edaca9289e26a3bfed96773d5a62cac76c4a0c7cd6e3bf83884a500df9f729d3d4b421a1a64bf0aea062695328a4921c9fd5a8fc9100ddd0bd993bfd3be1abe65b9f6e2aa856c94aaead14fbc00eec441dbf65024453d281c26d40965978068630b80522d7d209f6c8a915dadfbaa41386780e37c95cdd4c610183f3577ba6f9006798c7d26dab149d6ff52a15c87242db4f6afb182f9aaf75f9cf15d01dc607ce79dd281b05a19abea2474a1aa10601f376b5f36fb230cfc79575be65eb3b3608dd8943155e6254aef69daaa941aee90c594", 0xda}], 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000005c0)={0x2, 0x1, 0x9, 0x5}, 0x10) 16:59:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f68d12126beb96e3c300021cbd1e8efc6676e48b951347cd0502b5c02352184d790bd2a84b2944048f3ce86245f697ef1a5f4d54fe6f475f00b2511f6cd8c69c9d25ebe3d4367f3aa3de7f7bd60ebddfd1328531a88753e123cefaef343ef836c5fcc81b39941962fc7bda5acaf5aecc1de62b7f194d5aad22b28"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x853, &(0x7f0000000200)=':,\xd5-\x00') [ 1699.021950][T28498] loop4: detected capacity change from 0 to 1054 [ 1699.029520][T28498] EXT4-fs (loop4): bad geometry: first data block 19456 is beyond end of filesystem (512) 16:59:41 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000014e00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1699.147564][T28509] loop3: detected capacity change from 0 to 1054 [ 1699.181647][T28509] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1699.192808][T28509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1699.199277][T28509] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1699.210927][T28509] EXT4-fs (loop3): Remounting filesystem read-only [ 1699.217454][T28509] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1699.231376][T28509] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:41 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000d000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1699.237957][T28509] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:42 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) unshare(0x30000000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 1699.411941][T28533] binfmt_misc: Unknown parameter ':' 16:59:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x28, 0xf7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1699.496085][T28640] loop4: detected capacity change from 0 to 1054 [ 1699.524783][T28640] EXT4-fs (loop4): bad geometry: first data block 19969 is beyond end of filesystem (512) [ 1699.542836][T28647] loop4: detected capacity change from 0 to 1054 [ 1699.552711][T28647] EXT4-fs (loop4): bad geometry: first data block 19969 is beyond end of filesystem (512) 16:59:42 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000014f00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1699.604358][T28654] loop3: detected capacity change from 0 to 1054 [ 1699.636605][T28654] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1699.654521][T28654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1699.660990][T28654] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1699.675076][T28654] EXT4-fs (loop3): Remounting filesystem read-only [ 1699.681612][T28654] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1699.695815][T28654] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:42 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000e000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1699.702497][T28654] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1699.729077][T28659] validate_nla: 10 callbacks suppressed [ 1699.729090][T28659] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1699.799072][T28674] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:42 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1699.944614][T28780] loop4: detected capacity change from 0 to 1054 [ 1699.975128][T28780] EXT4-fs (loop4): bad geometry: first data block 20225 is beyond end of filesystem (512) [ 1700.000260][T28786] loop3: detected capacity change from 0 to 1054 [ 1700.023623][T28791] loop4: detected capacity change from 0 to 1054 [ 1700.024715][T28786] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1700.050013][T28791] EXT4-fs (loop4): bad geometry: first data block 20225 is beyond end of filesystem (512) [ 1700.062055][T28786] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1700.068466][T28786] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1700.081170][T28786] EXT4-fs (loop3): Remounting filesystem read-only [ 1700.087697][T28786] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1700.101738][T28786] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1700.108326][T28786] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:42 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:42 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:42 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10020, 0x3, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) 16:59:42 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000035400000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:42 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1700.343461][T28811] loop4: detected capacity change from 0 to 1054 [ 1700.367607][T28811] EXT4-fs (loop4): bad geometry: first data block 21507 is beyond end of filesystem (512) 16:59:43 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x401, 0x500, 0x6}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/253, &(0x7f0000000300)=0xfd) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1700.411303][T28917] loop3: detected capacity change from 0 to 1054 [ 1700.422344][T28922] loop4: detected capacity change from 0 to 1054 [ 1700.430486][T28917] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1700.440730][T28922] EXT4-fs (loop4): bad geometry: first data block 21507 is beyond end of filesystem (512) [ 1700.452223][T28917] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1700.458653][T28917] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1700.471318][T28917] EXT4-fs (loop3): Remounting filesystem read-only [ 1700.477956][T28917] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1700.491886][T28917] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1700.498488][T28917] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:43 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000035c00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:43 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00020f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1700.726523][T28954] loop4: detected capacity change from 0 to 1054 [ 1700.762923][T28954] EXT4-fs (loop4): bad geometry: first data block 23555 is beyond end of filesystem (512) 16:59:43 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x101700, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x1) [ 1700.776747][T29047] loop3: detected capacity change from 0 to 1054 [ 1700.802731][T29047] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1700.830887][T29047] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1700.837288][T29047] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1700.871043][T29051] loop4: detected capacity change from 0 to 1054 16:59:43 executing program 0: io_uring_setup(0x28ad, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1700.871289][T29047] EXT4-fs (loop3): Remounting filesystem read-only [ 1700.883950][T29047] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1700.897851][T29047] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1700.904448][T29047] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1700.916570][T29051] EXT4-fs (loop4): bad geometry: first data block 23555 is beyond end of filesystem (512) 16:59:43 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f002010000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:43 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000006000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:43 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1701.219292][T29174] loop4: detected capacity change from 0 to 1054 [ 1701.256201][T29177] loop3: detected capacity change from 0 to 1054 [ 1701.263261][T29174] EXT4-fs (loop4): bad geometry: first data block 24576 is beyond end of filesystem (512) [ 1701.286114][T29177] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1701.297214][T29177] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1701.303640][T29177] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1701.317737][T29177] EXT4-fs (loop3): Remounting filesystem read-only [ 1701.324303][T29177] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1701.330662][T29184] loop4: detected capacity change from 0 to 1054 [ 1701.338212][T29177] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1701.351136][T29177] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1701.355949][T29184] EXT4-fs (loop4): bad geometry: first data block 24576 is beyond end of filesystem (512) 16:59:44 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000780)={{r0}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @subvolid=0x6}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x0, 0x5, 0x40, 0x0, 0x2, 0xc000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x2, @perf_config_ext={0x101, 0x1}, 0x1040, 0x4, 0x9, 0x1, 0xffffffffffffff80, 0x7fffffff, 0x2, 0x0, 0x6, 0x0, 0x401}, 0xffffffffffffffff, 0x3, r0, 0x3) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) 16:59:44 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000011000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:44 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000006800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1701.584757][T29303] loop4: detected capacity change from 0 to 1054 [ 1701.614424][T29303] EXT4-fs (loop4): bad geometry: first data block 26624 is beyond end of filesystem (512) [ 1701.656009][T29309] loop3: detected capacity change from 0 to 1054 [ 1701.684203][T29314] loop4: detected capacity change from 0 to 1054 [ 1701.686635][T29309] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1701.692071][T29314] EXT4-fs (loop4): bad geometry: first data block 26624 is beyond end of filesystem (512) [ 1701.741188][T29309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1701.747657][T29309] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1701.776804][T29309] EXT4-fs (loop3): Remounting filesystem read-only 16:59:44 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000006c00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1701.783517][T29309] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1701.797636][T29309] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1701.804250][T29309] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:44 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000012000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xf7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x123200, 0x80) [ 1701.919087][T29430] loop4: detected capacity change from 0 to 1054 [ 1701.947718][T29430] EXT4-fs (loop4): bad geometry: first data block 27648 is beyond end of filesystem (512) 16:59:44 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280), 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1702.023350][T29437] loop4: detected capacity change from 0 to 1054 [ 1702.031245][T29437] EXT4-fs (loop4): bad geometry: first data block 27648 is beyond end of filesystem (512) 16:59:44 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000007200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1702.105329][T29448] loop3: detected capacity change from 0 to 1054 [ 1702.125778][T29448] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1702.136913][T29448] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1702.143369][T29448] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:44 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000780)={{r0}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x7f, 0x81, 0xf9, 0xff, 0x0, 0xd8b7, 0x101, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x81}, 0x400, 0x0, 0x0, 0x7, 0xc, 0x9, 0x0, 0x0, 0x3187ca6b, 0x0, 0xfff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1702.155897][T29448] EXT4-fs (loop3): Remounting filesystem read-only [ 1702.162456][T29448] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1702.176365][T29448] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1702.182968][T29448] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:45 executing program 1: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1702.296730][T29560] loop4: detected capacity change from 0 to 1054 [ 1702.313175][T29560] EXT4-fs (loop4): bad geometry: first data block 29184 is beyond end of filesystem (512) [ 1702.371927][T29568] loop4: detected capacity change from 0 to 1054 [ 1702.379636][T29568] EXT4-fs (loop4): bad geometry: first data block 29184 is beyond end of filesystem (512) 16:59:45 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:45 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000018000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:45 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280), 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:45 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000007400000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1702.535445][T29683] loop3: detected capacity change from 0 to 1054 [ 1702.557683][T29683] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1702.570316][T29683] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:45 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:45 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00001b000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1702.576696][T29683] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1702.588620][T29683] EXT4-fs (loop3): Remounting filesystem read-only [ 1702.595208][T29683] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1702.609168][T29683] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1702.615775][T29683] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1702.721445][T29697] loop4: detected capacity change from 0 to 1054 [ 1702.743784][T29697] EXT4-fs (loop4): bad geometry: first data block 29696 is beyond end of filesystem (512) 16:59:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8502, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5fbd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1702.800379][T29807] loop4: detected capacity change from 0 to 1054 [ 1702.813999][T29807] EXT4-fs (loop4): bad geometry: first data block 29696 is beyond end of filesystem (512) 16:59:45 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000027800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1703.037002][T29815] loop3: detected capacity change from 0 to 1054 [ 1703.065441][T29815] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1703.076345][T29815] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:45 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00001f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1703.082941][T29815] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1703.094912][T29815] EXT4-fs (loop3): Remounting filesystem read-only [ 1703.101483][T29815] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1703.115520][T29815] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1703.122145][T29815] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:45 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x40, 0x4, 0x9, 0x0, 0x8, 0x4021, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x50101, 0x7, 0xfffff801, 0x0, 0x5, 0xcd0a, 0x4, 0x0, 0x20, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 1703.239796][T29900] loop4: detected capacity change from 0 to 1054 [ 1703.252883][T29900] EXT4-fs (loop4): bad geometry: first data block 30722 is beyond end of filesystem (512) 16:59:46 executing program 1: r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1703.313655][T29935] loop4: detected capacity change from 0 to 1054 [ 1703.321904][T29935] EXT4-fs (loop4): bad geometry: first data block 30722 is beyond end of filesystem (512) [ 1703.491184][T29944] loop3: detected capacity change from 0 to 1054 16:59:46 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:46 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000027900000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1703.538663][T29944] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1703.561602][T29944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1703.568060][T29944] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:46 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1703.584181][T29944] EXT4-fs (loop3): Remounting filesystem read-only [ 1703.590857][T29944] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1703.604786][T29944] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1703.611388][T29944] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:46 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000020000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'pipefs\x00'}, {}, {}, {0x20, ']}'}, {0x20, 'pipefs\x00'}, {0x20, 'pipefs\x00'}, {0x20, '\xd0'}, {0x20, 'pipefs\x00'}], 0xa, "34f89de6128e227f2acecec02da6551097ac48fac78e0490a4d6c761ed03cdd129ea0329aa1c59243f66f73320ed96abe6b7b23d2005182cd55e85f74d915b9d4d3f7c12f0549b452051e57318c2c3aa6d3786b658b3d5d8e93ba5ba9519b488371e6ac8fc731ee96ebf10c8b0795dfbf68ed070"}, 0xa6) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x4, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff7fffffff}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x98015c4b89a29446}, 0x4000004) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfffffffffffffff7) r3 = signalfd4(r1, &(0x7f0000000340), 0x8, 0x80800) r4 = pidfd_open(0x0, 0x0) fcntl$dupfd(r3, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x40}}, './file0\x00'}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1703.865403][T30059] loop4: detected capacity change from 0 to 1054 [ 1703.919157][T30059] EXT4-fs (loop4): bad geometry: first data block 30978 is beyond end of filesystem (512) [ 1703.982110][T30067] loop4: detected capacity change from 0 to 1054 [ 1703.989523][T30067] EXT4-fs (loop4): bad geometry: first data block 30978 is beyond end of filesystem (512) 16:59:46 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000007a00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1704.207700][T30081] loop3: detected capacity change from 0 to 1054 [ 1704.235476][T30081] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1704.250373][T30081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1704.256839][T30081] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1704.269557][T30081] EXT4-fs (loop3): Remounting filesystem read-only [ 1704.276345][T30081] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1704.290341][T30081] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1704.296971][T30081] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:47 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x4, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x28a0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) 16:59:47 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f001020000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1704.538736][T30093] loop4: detected capacity change from 0 to 1054 [ 1704.569452][T30093] EXT4-fs (loop4): bad geometry: first data block 31232 is beyond end of filesystem (512) 16:59:47 executing program 1: r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1704.612535][T30100] loop4: detected capacity change from 0 to 1054 [ 1704.624104][T30100] EXT4-fs (loop4): bad geometry: first data block 31232 is beyond end of filesystem (512) 16:59:47 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffffff8500000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:47 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000240)) pidfd_getfd(r0, r2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1704.714139][T30197] loop3: detected capacity change from 0 to 1054 [ 1704.738184][T30197] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1704.749092][T30197] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:47 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000022000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1704.755638][T30197] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1704.768217][T30197] EXT4-fs (loop3): Remounting filesystem read-only [ 1704.774767][T30197] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1704.788727][T30197] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1704.796099][T30197] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:47 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1704.914630][T30226] loop4: detected capacity change from 0 to 1054 [ 1704.929747][T30226] EXT4-fs (loop4): bad geometry: first data block 34303 is beyond end of filesystem (512) 16:59:47 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1704.971769][T30234] loop4: detected capacity change from 0 to 1054 [ 1704.979443][T30234] EXT4-fs (loop4): bad geometry: first data block 34303 is beyond end of filesystem (512) 16:59:47 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000018600000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1705.037829][T30341] loop3: detected capacity change from 0 to 1054 [ 1705.075134][T30341] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 16:59:47 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1705.089161][T30341] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1705.095591][T30341] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1705.108087][T30341] EXT4-fs (loop3): Remounting filesystem read-only [ 1705.114642][T30341] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1705.128572][T30341] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:47 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000025000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1705.135242][T30341] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1705.483592][T30357] loop4: detected capacity change from 0 to 1054 [ 1705.515113][T30357] EXT4-fs (loop4): bad geometry: first data block 34305 is beyond end of filesystem (512) [ 1705.613214][T30365] loop4: detected capacity change from 0 to 1054 [ 1705.622178][T30365] EXT4-fs (loop4): bad geometry: first data block 34305 is beyond end of filesystem (512) 16:59:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='exofs\x00', 0xa40018, &(0x7f0000000300)='0000000000000000000000000000000') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x41000, 0xa1) setxattr$incfs_id(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2) 16:59:48 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000018700000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:48 executing program 1: r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1705.682581][T30469] loop3: detected capacity change from 0 to 1054 [ 1705.731822][T30469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1705.743504][T30469] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1705.749943][T30469] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1705.764742][T30469] EXT4-fs (loop3): Remounting filesystem read-only [ 1705.771319][T30469] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1705.785256][T30469] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1705.791916][T30469] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:48 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00002e000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:48 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:48 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:48 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000780)={{r0}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x1000080, &(0x7f0000000200)='pipefs\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) [ 1706.231779][T30490] loop4: detected capacity change from 0 to 1054 [ 1706.260542][T30490] EXT4-fs (loop4): bad geometry: first data block 34561 is beyond end of filesystem (512) [ 1706.282721][T30596] loop3: detected capacity change from 0 to 1054 [ 1706.305002][T30596] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1706.317053][T30599] loop4: detected capacity change from 0 to 1054 [ 1706.330761][T30599] EXT4-fs (loop4): bad geometry: first data block 34561 is beyond end of filesystem (512) [ 1706.341450][T30596] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1706.347852][T30596] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1706.360114][T30596] EXT4-fs (loop3): Remounting filesystem read-only [ 1706.366655][T30596] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. 16:59:49 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000330000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1706.380607][T30596] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1706.387212][T30596] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:49 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000018800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:49 executing program 5: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1706.581282][T30618] autofs4:pid:30618:autofs_fill_super: called with bogus options [ 1706.738807][T30623] loop4: detected capacity change from 0 to 1054 [ 1706.757092][T30626] loop3: detected capacity change from 0 to 1054 [ 1706.770239][T30623] EXT4-fs (loop4): bad geometry: first data block 34817 is beyond end of filesystem (512) [ 1706.790003][T30626] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1706.801663][T30626] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1706.808187][T30626] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1706.823506][T30626] EXT4-fs (loop3): Remounting filesystem read-only [ 1706.830180][T30626] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1706.844108][T30626] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1706.850715][T30626] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1706.870511][T30634] loop4: detected capacity change from 0 to 1054 16:59:49 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000032000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1706.887600][T30634] EXT4-fs (loop4): bad geometry: first data block 34817 is beyond end of filesystem (512) 16:59:49 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffffff8c00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:49 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:49 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1707.240111][T30651] loop4: detected capacity change from 0 to 1054 [ 1707.283649][T30651] EXT4-fs (loop4): bad geometry: first data block 36095 is beyond end of filesystem (512) [ 1707.311618][T30654] loop3: detected capacity change from 0 to 1054 [ 1707.335576][T30657] loop4: detected capacity change from 0 to 1054 [ 1707.343977][T30657] EXT4-fs (loop4): bad geometry: first data block 36095 is beyond end of filesystem (512) 16:59:50 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000003a000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:50 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1707.376086][T30654] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1707.407140][T30654] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1707.413609][T30654] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:50 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00003f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1707.425406][T30654] EXT4-fs (loop3): Remounting filesystem read-only [ 1707.431972][T30654] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1707.445889][T30654] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1707.452592][T30654] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:50 executing program 5: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1707.954079][T30682] loop4: detected capacity change from 0 to 1054 [ 1707.988551][T30682] EXT4-fs (loop4): bad geometry: first data block 40963 is beyond end of filesystem (512) [ 1708.000088][T30685] loop3: detected capacity change from 0 to 1054 [ 1708.024221][T30685] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1708.036289][T30688] loop4: detected capacity change from 0 to 1054 [ 1708.037701][T30685] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1708.049103][T30685] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1708.049616][T30688] EXT4-fs (loop4): bad geometry: first data block 40963 is beyond end of filesystem (512) [ 1708.072486][T30685] EXT4-fs (loop3): Remounting filesystem read-only [ 1708.079032][T30685] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1708.093098][T30685] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:50 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000040000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1708.099701][T30685] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:50 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000001b000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1708.359047][T30710] loop4: detected capacity change from 0 to 1054 [ 1708.421474][T30710] EXT4-fs (loop4): bad geometry: first data block 45057 is beyond end of filesystem (512) [ 1708.460110][T30713] loop3: detected capacity change from 0 to 1054 16:59:51 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000280)=r2, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1708.484526][T30718] loop4: detected capacity change from 0 to 1054 [ 1708.491711][T30713] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1708.503234][T30718] EXT4-fs (loop4): bad geometry: first data block 45057 is beyond end of filesystem (512) [ 1708.514327][T30713] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1708.520773][T30713] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:51 executing program 1: r0 = io_uring_setup(0x0, 0x0) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:51 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000147000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1708.534166][T30713] EXT4-fs (loop3): Remounting filesystem read-only [ 1708.541087][T30713] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1708.555013][T30713] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1708.561627][T30713] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:51 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000002b000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:51 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:51 executing program 5: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1708.954349][T30739] loop3: detected capacity change from 0 to 1054 [ 1708.962376][T30740] loop4: detected capacity change from 0 to 1054 [ 1708.994386][T30739] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1709.005850][T30739] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1709.012362][T30739] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1709.024857][T30739] EXT4-fs (loop3): Remounting filesystem read-only [ 1709.031442][T30739] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1709.045347][T30739] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:51 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000048000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1709.051947][T30739] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1709.064246][T30740] EXT4-fs (loop4): bad geometry: first data block 45058 is beyond end of filesystem (512) [ 1709.111060][T30752] loop4: detected capacity change from 0 to 1054 [ 1709.120632][T30752] EXT4-fs (loop4): bad geometry: first data block 45058 is beyond end of filesystem (512) 16:59:51 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000002b100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1709.472231][T30769] loop3: detected capacity change from 0 to 1054 [ 1709.506390][T30769] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1709.517093][T30772] loop4: detected capacity change from 0 to 1054 [ 1709.526584][T30769] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1709.533235][T30769] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1709.545198][T30769] EXT4-fs (loop3): Remounting filesystem read-only [ 1709.551769][T30769] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1709.565746][T30769] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:52 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00004c000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1709.572478][T30769] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1709.585610][T30772] EXT4-fs (loop4): bad geometry: first data block 45314 is beyond end of filesystem (512) 16:59:52 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1709.642869][T30781] loop4: detected capacity change from 0 to 1054 [ 1709.651466][T30781] EXT4-fs (loop4): bad geometry: first data block 45314 is beyond end of filesystem (512) 16:59:52 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000002ba00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:52 executing program 1: r0 = io_uring_setup(0x0, 0x0) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1710.004321][T30795] loop3: detected capacity change from 0 to 1054 [ 1710.027597][T30795] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1710.038362][T30795] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1710.044914][T30795] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1710.057011][T30795] EXT4-fs (loop3): Remounting filesystem read-only [ 1710.063686][T30795] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1710.077612][T30795] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1710.084222][T30795] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1710.101532][T30804] loop4: detected capacity change from 0 to 1054 16:59:52 executing program 0: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) dup3(r0, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:52 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000354000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1710.163148][T30804] EXT4-fs (loop4): bad geometry: first data block 47618 is beyond end of filesystem (512) 16:59:52 executing program 5: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:52 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000002bb00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1710.225556][T30811] loop4: detected capacity change from 0 to 1054 [ 1710.237416][T30811] EXT4-fs (loop4): bad geometry: first data block 47618 is beyond end of filesystem (512) [ 1710.645204][T30827] loop3: detected capacity change from 0 to 1054 [ 1710.697306][T30827] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1710.707991][T30827] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1710.714441][T30827] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1710.727422][T30827] EXT4-fs (loop3): Remounting filesystem read-only 16:59:53 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00015c000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1710.733990][T30827] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1710.747916][T30827] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1710.754546][T30827] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:53 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1710.862880][T30837] loop4: detected capacity change from 0 to 1054 [ 1710.901193][T30837] EXT4-fs (loop4): bad geometry: first data block 47874 is beyond end of filesystem (512) 16:59:53 executing program 1: r0 = io_uring_setup(0x0, 0x0) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1710.975163][T30845] loop4: detected capacity change from 0 to 1054 [ 1710.983594][T30845] EXT4-fs (loop4): bad geometry: first data block 47874 is beyond end of filesystem (512) 16:59:53 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000edc000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1711.328042][T30855] loop3: detected capacity change from 0 to 1054 16:59:54 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1711.396806][T30855] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1711.415066][T30855] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1711.421565][T30855] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1711.436857][T30855] EXT4-fs (loop3): Remounting filesystem read-only 16:59:54 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00015d000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1711.443489][T30855] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1711.457424][T30855] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1711.464023][T30855] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:54 executing program 5: r0 = io_uring_setup(0x28ad, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1711.673915][T30866] loop4: detected capacity change from 0 to 1054 [ 1711.715821][T30866] EXT4-fs (loop4): bad geometry: first data block 49389 is beyond end of filesystem (512) 16:59:54 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000003c100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1711.767187][T30874] loop4: detected capacity change from 0 to 1054 [ 1711.774609][T30874] EXT4-fs (loop4): bad geometry: first data block 49389 is beyond end of filesystem (512) 16:59:54 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1711.923124][T30884] loop3: detected capacity change from 0 to 1054 [ 1711.957442][T30884] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1711.968026][T30884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1711.974473][T30884] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1711.986392][T30884] EXT4-fs (loop3): Remounting filesystem read-only [ 1711.992948][T30884] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1712.006990][T30884] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:54 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00035e000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1712.013627][T30884] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xa1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xe, 0xffffffffffffffff) 16:59:54 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:54 executing program 0: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1712.172770][T30897] loop4: detected capacity change from 0 to 1054 [ 1712.201864][T30897] EXT4-fs (loop4): bad geometry: first data block 49411 is beyond end of filesystem (512) 16:59:54 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000003d400000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1712.251587][T30905] loop4: detected capacity change from 0 to 1054 [ 1712.258504][T30905] EXT4-fs (loop4): bad geometry: first data block 49411 is beyond end of filesystem (512) [ 1712.402089][T30917] loop3: detected capacity change from 0 to 1054 [ 1712.424806][T30917] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1712.434525][ C0] sd 0:0:1:0: tag#4338 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1712.444361][ C0] sd 0:0:1:0: tag#4338 CDB: opcode=0xe5 (vendor) [ 1712.450712][ C0] sd 0:0:1:0: tag#4338 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1712.460025][ C0] sd 0:0:1:0: tag#4338 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1712.469070][ C0] sd 0:0:1:0: tag#4338 CDB[20]: ba [ 1712.477421][ C0] sd 0:0:1:0: tag#4294 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1712.487260][ C0] sd 0:0:1:0: tag#4294 CDB: opcode=0xe5 (vendor) [ 1712.493627][ C0] sd 0:0:1:0: tag#4294 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 16:59:55 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:55 executing program 0: unshare(0x28020000) unshare(0x0) unshare(0x20020000) unshare(0xc000000) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') [ 1712.502663][ C0] sd 0:0:1:0: tag#4294 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1712.511703][ C0] sd 0:0:1:0: tag#4294 CDB[20]: ba [ 1712.517787][T30917] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1712.520717][T30932] loop4: detected capacity change from 0 to 1054 [ 1712.524256][T30917] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1712.542438][T30917] EXT4-fs (loop3): Remounting filesystem read-only [ 1712.548967][T30917] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1712.563195][T30917] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1712.569958][T30917] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1712.580137][T30932] EXT4-fs (loop4): bad geometry: first data block 54275 is beyond end of filesystem (512) 16:59:55 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00035f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1712.644337][T31036] loop4: detected capacity change from 0 to 1054 [ 1712.669810][T31036] EXT4-fs (loop4): bad geometry: first data block 54275 is beyond end of filesystem (512) 16:59:55 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00111fc0d900000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@migrate={0x2e8, 0x21, 0x100, 0x70bd25, 0x25dfdbfc, {{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x5e, 0x0, 0xee00}, 0x9, 0x1}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd27, 0x70bd26, 0x70bd28, 0x9, [0x1, 0x7f, 0x10000, 0x2, 0x3f]}}, @algo_comp={0xdf, 0x3, {{'deflate\x00'}, 0x4b8, "f4e3bdbbe2a1199c63355f8f9303c4f8bc405b1564aa085a1c0faf0ef486c66ea5ca7db05b36aa561c4e849a167e6149598ada09f66200394c00ff2eb3e3b28a4165f92fcdb0bc67dbfe630091521fbef0ae6d88231cf5a77e219a6aa370b466c1dc0502bf6141eeb99771a4643b76f9222c3885f044845ce6d2ccbc87c3d6a10bf7f8ca46f578c3d64a5eb4ec055531e69f2197a8aa10"}}, @coaddr={0x14, 0xe, @in=@remote}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd27, 0x2}}, @algo_aead={0x9c, 0x12, {{'aegis256-generic\x00'}, 0x280, 0x60, "a4c0fca85bd05c664da2695a866f34c06715a8da7cc6e3e5f13354f3e92f0950470f880a8f2e8dfed8c696bc39735be8aa3da8b6aa7ba3a72229a65916aef0ad0ca85f368377d23c609c562f7eb0d991"}}, @mark={0xc, 0x15, {0x35075c, 0x8}}, @proto={0x5, 0x19, 0x32}, @tfcpad={0x8, 0x16, 0x4}, @policy={0xac, 0x7, {{@in6=@loopback, @in=@private=0xa010100, 0x4e21, 0x8e, 0x4e21, 0x20, 0x2, 0x80, 0xa0, 0x1}, {0x80, 0x8, 0xa30, 0x0, 0x4, 0x93, 0xd3, 0x1}, {0x3, 0x5, 0x4, 0x1}, 0x6fc2, 0x6e6bb2, 0x1, 0x0, 0x3, 0x4d03efcbb604eead}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x1}, 0x4c090) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)={0x18, 0x27, 0x301, 0x0, 0x0, "", [@typed={0x2, 0x0, 0x0, 0x0, @ipv4}]}, 0x18}], 0x1}, 0x0) [ 1713.021845][T31052] loop3: detected capacity change from 0 to 1054 [ 1713.061924][T31052] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1713.089242][T31052] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1713.095695][T31052] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1713.119815][T31052] EXT4-fs (loop3): Remounting filesystem read-only [ 1713.126382][T31052] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1713.140446][T31052] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1713.147040][T31052] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1713.242129][T31060] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1713.281889][T31063] loop4: detected capacity change from 0 to 1054 16:59:56 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000060000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:56 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1713.316871][T31060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1713.341456][T31063] EXT4-fs (loop4): bad geometry: first data block 55744 is beyond end of filesystem (512) 16:59:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x15}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe2c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x976}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x48}}, 0x4040040) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0xffffffc3, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) [ 1713.381397][T31067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1713.394350][T31070] loop4: detected capacity change from 0 to 1054 [ 1713.410094][T31070] EXT4-fs (loop4): bad geometry: first data block 55744 is beyond end of filesystem (512) 16:59:56 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffffffda00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:56 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r2 = gettid() wait4(r2, &(0x7f0000000000), 0x1000000, 0x0) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xa000000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000540)="dcaef6b986f314851db93c0c451b7c34db9ac1cea1d25d54b300b78e8cc5f52cea4e5fcd55d25a035e8dfa00d57541c96051da7592bde10b8862159f1def0ab3c1fd08014c9ea809fd71cb2dd5f1576533fc6c7fede4889b80195de5870c280e6f2755e90bd8", 0x66, 0x8530}, {&(0x7f0000000400)="1dd37b5c13c9a7245da86793677b2dde38bbf8b090a82df2176c3a03e7f5b24f538e4d115c190b882284004a445e1aeff741b8030407ed6dae00f50155fc6ad3a650a07aa8ec96b9cb20b333a8bbe6b6f374bc42c1393e3891f8bfcc9e66eae36223db380eee6242f90e68ad079c58514a08f0ee34497720ebdb11c1caef", 0x7e, 0x400}], 0x8000, &(0x7f0000000340)=ANY=[@ANYBLOB='/dev/?\x00mx\x00\x00\x00\x00\x00\x00\x00\x00a(9ysf\t\x00,*:']) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x8001}, 0x4) poll(&(0x7f0000000640), 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 1713.811220][T31088] loop3: detected capacity change from 0 to 1054 [ 1713.840245][T31088] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1713.870333][T31088] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1713.876748][T31088] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1713.888597][T31088] EXT4-fs (loop3): Remounting filesystem read-only [ 1713.895234][T31088] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1713.909255][T31088] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1713.915909][T31088] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1713.939544][T31096] loop4: detected capacity change from 0 to 1054 [ 1713.996027][T31096] EXT4-fs (loop4): bad geometry: first data block 56063 is beyond end of filesystem (512) [ 1714.053035][T31103] loop4: detected capacity change from 0 to 1054 [ 1714.086722][T31103] EXT4-fs (loop4): bad geometry: first data block 56063 is beyond end of filesystem (512) 16:59:56 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000360000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:56 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000de00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000808d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r2 = gettid() wait4(r2, &(0x7f0000000000), 0x1000000, 0x0) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0xa000000000, 0x2, &(0x7f0000000240)=[{&(0x7f0000000540)="dcaef6b986f314851db93c0c451b7c34db9ac1cea1d25d54b300b78e8cc5f52cea4e5fcd55d25a035e8dfa00d57541c96051da7592bde10b8862159f1def0ab3c1fd08014c9ea809fd71cb2dd5f1576533fc6c7fede4889b80195de5870c280e6f2755e90bd8", 0x66, 0x8530}, {&(0x7f0000000400)="1dd37b5c13c9a7245da86793677b2dde38bbf8b090a82df2176c3a03e7f5b24f538e4d115c190b882284004a445e1aeff741b8030407ed6dae00f50155fc6ad3a650a07aa8ec96b9cb20b333a8bbe6b6f374bc42c1393e3891f8bfcc9e66eae36223db380eee6242f90e68ad079c58514a08f0ee34497720ebdb11c1caef", 0x7e, 0x400}], 0x8000, &(0x7f0000000340)=ANY=[@ANYBLOB='/dev/?\x00mx\x00\x00\x00\x00\x00\x00\x00\x00a(9ysf\t\x00,*:']) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x8001}, 0x4) poll(&(0x7f0000000640), 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') 16:59:57 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1714.596172][T31124] loop4: detected capacity change from 0 to 1054 [ 1714.648630][T31127] loop3: detected capacity change from 0 to 1054 [ 1714.655311][T31124] EXT4-fs (loop4): bad geometry: first data block 56832 is beyond end of filesystem (512) [ 1714.701093][T31127] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1714.718294][T31135] loop4: detected capacity change from 0 to 1054 [ 1714.731071][T31127] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1714.737616][T31127] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 16:59:57 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) fallocate(0xffffffffffffffff, 0x68, 0x7fff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x1, [{0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {r0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, r2}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {r0}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {r1}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {r0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}], 0x1, "060cd6bed5f770"}) r105 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r105, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}], 0x0, "2156816c73038c"}) r213 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$SG_IO(r213, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r214 = syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r214, 0x8010661b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004cb00)={0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) clone(0x52004400, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061ec0)={0x1, [], 0x40, "3b13d855e081c0"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dc40)={0x5, [{}, {r126}, {0x0, r114}, {}, {0x0, r157}, {r53, r94}, {0x0, r5}, {}, {r71, r146}, {r145, r144}, {}, {}, {0x0, r23}, {r99}, {r138, r136}, {}, {r170, r147}, {r92, r205}, {}, {}, {r196, r73}, {}, {0x0, r98}, {0x0, r142}, {r133, r162}, {}, {}, {r44}, {r4}, {}, {}, {}, {r115}, {}, {0x0, r167}, {0x0, r8}, {}, {0x0, r169}, {}, {0x0, r195}, {r112}, {r51, r24}, {r188, r102}, {}, {r78}, {r151}, {}, {0x0, r152}, {0x0, r22}, {r79, r118}, {}, {r140, r76}, {}, {}, {r93}, {0x0, r107}, {r211}, {r104, r169}, {r203, r86}, {}, {0x0, r19}, {r207, r161}, {r28}, {r87, r80}, {0x0, r108}, {0x0, r194}, {0x0, r17}, {r82}, {r20}, {}, {r1, r91}, {0x0, r39}, {0x0, r63}, {r173}, {r128}, {r88}, {0x0, r80}, {r184}, {0x0, r192}, {0x0, r57}, {0x0, r101}, {}, {0x0, r54}, {r61}, {r159, r42}, {r13, r116}, {r15}, {r40}, {r183, r146}, {}, {r182}, {}, {r178}, {0x0, r41}, {r67}, {r109, r176}, {}, {}, {0x0, r127}, {r185}, {}, {}, {0x0, r77}, {0x0, r18}, {0x0, r111}, {0x0, r158}, {r215, r198}, {0x0, r132}, {r209, r74}, {r203}, {}, {r172}, {}, {r60, r76}, {0x0, r174}, {}, {r137}, {}, {r89}, {0x0, r165}, {}, {r124, r171}, {r97}, {}, {r30}, {0x0, r62}, {}, {}, {r53}, {}, {0x0, r12}, {r85, r130}, {r117}, {r11}, {0x0, r35}, {r181, r118}, {}, {}, {r65}, {r56, r189}, {}, {r47, r37}, {r14, r200}, {0x0, r70}, {r193, r32}, {0x0, r180}, {r36}, {r119}, {r59}, {r47, r156}, {r164, r148}, {0x0, r52}, {}, {}, {0x0, r81}, {r131}, {r138, r95}, {r43}, {0x0, r113}, {0x0, r31}, {r33, r48}, {r175}, {r21, r34}, {}, {}, {r75}, {}, {r149}, {0x0, r141}, {}, {r212, r68}, {}, {}, {r201}, {r135}, {0x0, r166}, {r143}, {}, {0x0, r187}, {}, {r16}, {0x0, r49}, {r135}, {}, {0x0, r120}, {r197, r37}, {r27}, {r64, r204}, {0x0, r150}, {}, {r191, r29}, {r61, r122}, {}, {}, {r90}, {r72, r202}, {}, {}, {r153, r139}, {}, {0x0, r69}, {r9, r94}, {r100}, {}, {r84, r70}, {}, {}, {r40}, {r83}, {0x0, r110}, {0x0, r199}, {r38, r96}, {0x0, r58}, {0x0, r66}, {r210, r123}, {0x0, r25}, {}, {r179}, {r206, r160}, {}, {r46, r208}, {r163}, {}, {}, {0x0, r129}, {r155}, {r6}, {r190, r144}, {r181, r134}, {r45}, {}, {0x0, r52}, {r65, r177}, {r26}, {r168, r3}, {}, {}, {}, {0x0, r10}, {}, {0x0, r106}, {r154}, {}, {r121, r186}, {0x0, r55}, {r7, r129}, {}, {0x0, r125}, {}, {r26, r103}, {}, {}, {}, {}, {0x0, r50}], 0x4, "30672a09103034"}) [ 1714.749335][T31135] EXT4-fs (loop4): bad geometry: first data block 56832 is beyond end of filesystem (512) [ 1714.768820][T31127] EXT4-fs (loop3): Remounting filesystem read-only [ 1714.775422][T31127] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1714.789338][T31127] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:57 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000df00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1714.796010][T31127] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:57 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000361000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:57 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {r4}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {}, {r4}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {r3, r5}, {}, {}, {}, {r4}, {r3}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}, {r3, r5}, {}, {r3}, {}, {}, {0x0, r5}, {}, {r4}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {r3, r5}, {0x0}, {}, {r3, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0}, {}, {r3}, {r4, r5}, {}, {r3}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {}, {r3}, {}, {r4, r5}, {r3, r5}, {0x0, r5}, {}, {0x0, 0x0}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {}, {}, {r3}, {}, {r3}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {}, {r4}, {r3, r5}, {r4}, {}, {}, {}, {r3}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, 0x0}, {}, {r4}, {0x0}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r5}, {}, {}, {r4, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {0x0, r5}, {}, {r3, r5}, {}, {r4}, {r4}, {r3, 0x0}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "2156816c73038c"}) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x182, 0x0, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, r12]}, 0x5) r13 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000003640)={{0x0, 0x7, 0x7, 0x7, 0x4, 0x0, 0x80, 0xfffffffc, 0x7de3, 0x81, 0xfffffffe, 0x3, 0x8000, 0x4, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r13, 0xd000943d, &(0x7f0000058c40)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {0x0, r8}, {}, {r14}, {}, {}, {}, {r14, r16}, {}, {}, {0x0, r16}, {r15}, {}, {0x0, r16}, {}, {}, {r15}, {}, {0x0, r16}, {r15}, {}, {r15}, {0x0, r16}, {}, {}, {}, {r14}, {}, {}, {r14}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {r14}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {r14}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {r14, r16}, {0x0, r16}, {r14}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {}, {}, {r15}, {r14, r16}, {r17}, {}, {r14}, {}, {}, {}, {r14}, {r10}, {}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {r15, r16}, {}, {}, {}, {}, {0x0, r16}, {r14}, {r15}, {0x0, r16}, {}, {}, {}, {}, {r14, r16}, {r14}, {0x0, r16}, {}, {r14}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r15}, {r14}, {}, {}, {}, {}, {r14, r16}, {r15, r16}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {0x0, r16}, {r15}, {0x0, r16}, {r14}, {}, {}, {}, {}, {}, {r15}, {r14}, {}, {}, {r14}, {}, {0x0, r16}, {}, {0x0, r16}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14, r16}, {}, {}, {}, {}, {}, {r14}, {}, {r15}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {0x0, r16}, {}, {r15}, {}, {0x0, r16}, {r14}, {}, {r15, r16}, {}, {}, {0x0, r16}, {}, {}, {}, {r14}, {}, {r14, r11}, {}, {r15}, {r15}, {r14}, {}, {r15}, {r15}, {}, {}, {}, {r15, r16}, {0x0, r16}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000002440)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002640)={r9, r7, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001300)={0x0, r18, "3b902f8093f1e223821c73c476000925f75f295704525e341ca87a763dbccd2d73c4b735b94d749412679ecfa93a2808c07e58629547dccc774aeb266c512a0b3811e3d0706a48d83bf5cecc3ba6aba74e99308f84219a5bfbf08690dfd23145113ed54d6a91a305702e1724a403c21d7a2596b91d3b3b593b190be278ff3dcde7941755675bda8b2c7d9abf69e82e914f96e0b934d22e600d74bfebf6efc2ba890b3ff6bd79a1e0cc53a57bfa4e5712eacaed0b13bdac68fa67a5acc763e79cdb1707fa16ddf5b929e4aa7183b8d508c9bf2469eeff26b8caa7d03c63362fa4083e3c269257a7b3fd511a534ac0638b35d978d283c8339449f01aa2f24ae0d8", "65f4f750526795587b6dc5421b0ac09605526bbc79fdfcfb82bf9080d82300394eff7d29f8fa15bfb0d5e63d0a1039bb41100d6a7037e2e5f5a0ec40a2c3bffc591aaa2be1f75a6b9bf400177e67f095b86b9f8d76b77b6ff1123f9ea9b78171fe7e8b122b1aef8ad6acb2df7af367abb02fc1774a96c4ac0892fc1cc20b837c3762a1fa4f3e4559a4458bdf82dd23b51a66f6ef1a3100020270020c30beeb05ffce1ddbb3694472422f99bdec646465c7b138f8530cb3f1f295ee8de2a6a2118c74cdaeb09cd15b07ac8859318ff693e3ed539077c30478bb5aeba819e6345f2cee15d617317f736fa0a2ead44a46491e797a1c1a2071f70cf34a8771ea6b327e5b544848a89bfb89390e04a908ea1fd2e55d2a4754d32318c6d1781f17eb8474db862d2ad1b14f78f36f365fc91f2499ace9fe440d2b49bc058e5a75cf48328c4a43ff5f8b204ab3cfae89a8b7c2fded5245e9847789e51d4bc95a520e967028aa4dc310932a3fe5f21b659509e0d87550dcc02ed39466c8927ae0533fab9c64fda35689b135945542ba05dc4063e5117e3e6e729a296bc5f56f961794c0f42684aece2a0fffcc3da81ca95bcaee7a89206879d7a3f0d5511460dfce2a39b2d059553e688124d895f6580c07073d5c2ec7b027eac9a7b3d306e95640c5a64cfb3ec8dfbdf55ec4e2a3897cf7b0c6ed93ff1d76e38bf16b6a5f635c73e08a3c07971a5be86ec5ecf15b4b5c723cd876453b07bd42b04d48c3ec20aadfc00fe435b0db16542bff45a7d09bda42df3c557273013ef8d1a1edb3ae22133e9d0645b7f0539cfb95277f947d6919904f481bb5547ed8494fa6c33dfdb087eb851528f1e4a397511ad00453e38de46413a59bc39466c6c00c8eadff7672f48995422ed7f379d5ba4493453bafcf84f08dfbecad7268148d6b972a3541835dc89c3dbd00bbaa1f66cd05c45fc50ceefe0829785fc6112486a67ff0df7d46c561dc3cecf914329493c62ec78204f4dbd235d6eae192d09fd42d2d2c6b91121a178a8474bed0c200652f234bf95ee56c33647bc0b2f12ee210bdf76134e4b0b93be2b5c5bcb0dad0e028fd339a031d50c0d74652ee3f906e679c5fb782dfe82e03144d64ea13eab859140b54f54c45513ad654f2d2894153da59a4ba9f9279b5c0763e6944884a196f7745118e5598f75e85e624be320d6ebc6d8c3473de04db04fb81c6760a9dc680e44b2ffd4b01598fd5a4e80e4f0febec243ee8ca245badfc50981a7749c29098725b07a06eacd2bea8badbdac0f2bde3e68e504aca0a455439c08736f071c8a0aeb54af9e3ca2c148b992b1046a52f97efb2231029205ffc95785222ac8922b8b1e664e3fae2dcce41b4b23cd6d56167282cf759fce4481a7ed23be884e95a5109c1836e2596ef5b7b7096f3fd3e359a8f9ae84169f5fd00f458a14561c058f20f8a350a518e0b84295d3ee62529b274d0fe4f48fbe2eb7bfa8916ac437df9ef8b75f4aedaecf03640707c2c9a3ad58201c8de5bdea28617e0234f309b68ff48391d865e290f70668664d26861ff2ea461e3af71f2b20cd7e8c2eebcd98df6dc825a7d8fbf3b7617dc71c7027ec8e076cd2c0f1c1ef6e1199ebada99e9666417eb69e5b966ff9d8d39a60a8d7887ba6239600fb6c381eb6fc4ed71cc2d5cee530a6622cdb4e39a949c5576dcb5c8bb174671f348aa6ab6b12ab38b10b3ddf74968f305079d0d8472a2313ce689734a2e475ee5db55ef6b72106f8ca5b6ab8fa5fb6e68a62981d5d6156a80ad509976c5e833f6c4f2835f8b993871529e1da402a053faae4d57f4052a6cb867578647ff710069b25116efe8c016565318b9bd79a39780543dd6b52151e56aa97ce352261db7e086c0f5037abab52f4cef9aa004a54cc13d404bd6eb93a1d6415f7e79bd409b526b0ee24a531c4c21824232df56a2947db28e4273e31e3ab12d4c47f4933b3add5d77ed3e8b65405cdaed3622f48222215b617030b86d908d64db3c40bdbba60978331cc014cba2ea93d892f732a74bef654ebadf7156e8aca3da9b195bdf3fd900d28fe7951663cc80797b489f63766f3f4a03f98b5613c1da209eca1c8751bd2a624b0ad40abca885a8190bbc8a4efe538727ad142cec4a4c98738e76344bb932b16fd50f969da1701f1839247b322dda8f1e97eb24c448b7f8cdb493b5c36323cead54897e7c8f65f0793ef8e5d6e364952de4309d72532c287a21e6a59af17d3886f133f48ccdef92d6345be8a026061daf507eeb50a92c8b24352f9f8e8d2a333e4cca4434e63702b770894875a5a3f9196774b05b3246acf5a7b055f2dd79957abd6e6d35e6f5ab4637800930e8b84967237ffce16df715c3b923bc617d00fee88711dcbcc128cdda857ada42043287a38347799e0a4b930637591557bce1175b92c83344a48531d1789cb55dce983c48a7c407dd664a485af216cc72928d352b1c984531acab4084b5b5866d0b242a00d8447a154a200d637c451d9904c1d4739771019eb978a986c699dc56196d164b0472640c7a5639da307f966e7ad74445d0c29fafd4fc95ef171d87baca01315220f6baba6218d83ba78556cab13953019ff5a0291809d8b8201c540e411bff0e5c079e743a1e88089c1d8fdf6419897d3ae9b65da348493027d583993cdb8227437637fc9b3ebd49b7e18ab128f6b9e802278b07af4bff6a6e4a48d6461a4f4a9c0f53d8de63d8fd6d5438eab7a9ad4de2de352b2e5c92b5c75e6f7d9ebe4cd4d31bb3b2fe20a74698c5152dad1215d2f79f939a214d7d735dd9ed930a4a238a3fb002e472f1cd2665b3d792bb46867bd40d0563b854816a4e7539eecef3fd66e48a28d39587e88141715c90e53e40ea14a4e664a922b2059524900cff537cb4e4ee5aad429414c3e1a6d8b657ebfdfee11ad6318df4d2827a94f605adc4db3ed027d5618af49a5f0b9e6e45e52d4d3b272bb3623f0b32e4f832d3551d39610115cce2eb75b07c672f54680d41f28bd41df2a440e55a37c12d1750bdb9f43821685fadff149b15fec3dc99e6bd0a88d6b0c1f2c7618cb7fb419cb76d16be249e199f9ade34d8c5205114e439537fa0407e909c21c7703a0d5955f45ef1d459fdcbce2fdf58b981c7e467ecfda8d2fc989f174f99e900d817cfe03abbd0a72c7d47a8fac6e0cd432423b2ccca0c9fc4e1f8ace5e9d91d3704a66fe3bf4a05aeaafad0ee725bcd173a8e0ad6b6eeccdc8578c047eafc62626dfb1cb360c26de2c3328d42f1b03d29e95eaa7b4ced16ae0e7c1833ff3373668c5f9704a74e9334a5c2e8f83c7bd54ec59946078893e3f0f7d61658810cca795015910c79690f2d2580a241fe834d6eaf2a15cbd717f2acf973176b9b631f3743000baa827b573d8f4782ff1f971f356841c486ca95fe3908e3080f82fba98a2c1b4b9664e8ee5da9cd6a7c55e03ac75f80986768a76abfc494bac8b2e80d90e53da6222555528dfc471d05d7405079d62ae93559777b5294e7822bd227a1eaa89c670129d92af9400ed714ebd7a7498ff8599263b18a8f2ea4d2afa911e038b16f6c8813e55bea61f04c85c44db21ba459df599a69f852918830fc1dcfed83df99fd8875743ba1afa02b73450aa3a8fa33114a6173d840d963c528633f2eb086c34c3e859711a1edbf7ffda5f0009acb3f362abfeed50e09b2c74cb191fc409c3ad235d57c904ad581ffeaed09f44bbac27121f2b7aafa42c96707eb20365204d3ba21cb2b93a791e7cdc5ad3077e219e9d9c2016e78551faa1db38c1469a1affd37ca348f703d0a2fb9699977960996cb89907b91352a85d481cdbb60131ec09154ed84a1096bd59076a53e636574c03aa6b46318e027aaefec5dea317812a7ee7ba6ef4eb09cbaf395823f6e3ca0ad84354ebe346101aa01019e75788fa28b2cb0c7a821d529a9ce3fb1e481d7018ac553a6dc92859c68f18c6d4c3487c074fa4e3d4a6fc2f61e5fb71054d750b4684686fb314771d340c7efc55c45e3ba78db6ecc1b08a05587815d8c08318253d43890164a255cf29a9aa569d7c32805413b23f675c49c7f09d9a039a77fa837cea7108824a15816c295c9e9e64f6b6247d776d2e460996e2cd00b59b728491fb0af4f070fe2d9a223aa1bcdf821960342b0ed811195a31d1808a35a2e62622f3bf604c05e1780681421883a7563f0e71e27d703f98bbf5baa27157f5008cfc248d55d2c05774e03dfedfb12095e9aa875cbe4282fbb55706e2cef0bf40966e0536c74453bee87b880c202177de9f869bbf81a9937ac920ace157d567faf40ee232493186f13e199be6496f299f112bc3e30e879fb2e1f82e485f663ae9dae5eeb5d2fa7b5c5c156dda08a8a37f6c1f851d048afd45c41b1e217dbdb9d038f73b3d26dd17ea698cefa5a31079de96934c240c1a3fca60fbde3e71f69b68adecc5e2094be606d172e073ad6be09940287d0cc3086fd5f4308b6ee090ef489f866955921d746bda072d1f2f86f98e6d8d0e3fcedd59f2083c762a3a8c0bdf9bb624379daad6fe6a3accfdf5455eb2ba3ff6a0d2bda3cee6255ea140b75436aafaba99049cabaa4850224112e009f865bd49503f72857981ee0eaacb2a9428040b3924f8de696a811751b8ce07b1f5eab16de8b37a8d5ac2b92e8392c9c8e14f28f344589962b6dd717df4fe239b792ce007f771218ba797fb72a3409d555ff65d2f7e4e44c92dc56ca72d0e3e19526af564c66041ef565627c4a7222caf874966f7c861f06e4365decb3e3b651532ca61b9f639a16f353cf429c390b158974eaf4fa16e69d35824377af70556c9e3e4a52c7ac5edf2d2263358dbf4a2a9559496bce57c762cd6f3283cfa6b36554d743714203263de0e61328f42f7e01a01b39ad09741338fafb131e61080c7f83e6fefc9d667050720c65ad867019fcd4946372a77b964f7c940425ebb3fdf2c5afccf78320632e2a5312b1d3306ae628e9a60c83e50b060a313b428a057aaacad98483647fd09e7b39c6297dbee70fde828ee70de34b95c0551440b47174a1ff7ffb11b70c488322ebc9813ef4ce3342875417d5dda4178f097c5ea426471233f0a7da9edc0d1408e84cc5f761dcd7ebfc0703c2c1ac400c7d1ee23f4d8aa0b4f1dd5268972057b376412c01313a3501931bc93f327c0a2ad4ed8da6332ba5069b312824e290e2cc550527fda5d303094d9d36b0f75413a4ef7941d61849812157519a3b16079cbe0e20159bab815169e34af644b0d5a4e379b50d8325371beb0a50fcedca1710df0ab9f6058072c30a61b35c1d3225d0bd893a6de75c2f2291d71c343ed80194aebf9cbb13f4c1f27bbe166250a5f8a9ebcac6e4a3cca003cd01b98a0970baaa278ef89de533c637a386"}) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002300)=ANY=[@ANYBLOB="4c00000082afce517f0032fbd84813302b39320fa57b1a2c4dde5bdaf80dbb3c54cefd9d47ba736e7400683f140b3f61e3c7ba0138e56df94afb2e45317785bda9af29f52a8ffc9f47a6296bd2e99122fd9fa8906f02bddd851fe69509d113d33a8182f8f538bd888422abfe54c0e6b70caf2aa5a100d60227a7eeee936df46e814f122ff06aa0c236f41951db2645eeb99e5bea1acd05fcb0ade96f0b56cf899374a439292cc2a4bc195d6751d7ddfc369712e58ef96981ec354c071c6be919b4a7801297f12e4cc48a8d207be46bf1c7d0939b41514a3683a98b17c2af0981a46b6e280d092f22be222005f8e0876929b8a3ea9cb416"]) [ 1714.972512][ C0] sd 0:0:1:0: tag#4342 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1714.982375][ C0] sd 0:0:1:0: tag#4342 CDB: opcode=0xe5 (vendor) [ 1714.988720][ C0] sd 0:0:1:0: tag#4342 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1714.997772][ C0] sd 0:0:1:0: tag#4342 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1715.006827][ C0] sd 0:0:1:0: tag#4342 CDB[20]: ba 16:59:57 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc336, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="d45c57c6a7ecbb3e735d09900185f70491cab10cda42eea56e645d69392eb1d0cf6fc6a71a05866b75ecc7c780172072a2d9eace9ab8c528aa69abd51f33e9be5ce73164498ed174e38cbb21f2587da268a861a2b8bd42df8b4e7b3e38a4039ea6183f2396c05ea084732fbae80d1a57b2f0f73cebb9", 0x76, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="d0ed1ee5c761323ad7fc2663e877e6e2f907aa64c5e63268", 0x18, 0xa05, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000700)="0e3bf598064b7099314e87b93e56155a25c577b9753dd5d42b7d4fdfc3a6f6ccc640073d09eb18c18bf9df34efd9a610be8facdb1f27aeb5cb2ced1aab0a2ff2442944ccf0af2ec8cf6de2ef9d64787de1ef930332f929", 0x57}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1f, r0, &(0x7f0000000580)="b5d2dfcb1885776c5b4a2a1a48b8b07ba1722ba33cc74cf19737bacc6902b0af33811bd85484df6c9549e03cd2c70fa8a18a05f4445922541291d12d4bc8a506586ea2628b612d364d49a4b30fa0a31e8f8236b63043d34d0f5384daef84934352473e3e78c3ba3d8d6870734d4a283587b26230f937390f27e745d4471b657d2480d76179861eef81eb82d9bfbd1b0c5efb127d557029577701b404db6deefa130d08a049e9227771060406d5351088ef378f067b230d65956c7913447a854fd9567c661c0528125d8b3d349f6d", 0xce, 0x4, 0x0, 0x0, r6}]) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x10000d, r5, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) [ 1715.345472][T31264] loop4: detected capacity change from 0 to 1054 [ 1715.353394][T31265] loop3: detected capacity change from 0 to 1054 [ 1715.394727][ C1] sd 0:0:1:0: tag#4288 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1715.404602][ C1] sd 0:0:1:0: tag#4288 CDB: opcode=0xe5 (vendor) [ 1715.410962][ C1] sd 0:0:1:0: tag#4288 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1715.420009][ C1] sd 0:0:1:0: tag#4288 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1715.429081][ C1] sd 0:0:1:0: tag#4288 CDB[20]: ba 16:59:58 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000180)="66e69d83a25eb2f89138e5ae5138501d11bd0c228e206814fd9fae77f9997ae334da7f5af73061d267c7f56ae1337f825339598af4a87f013a389ba5a8518cba", 0x40, 0x8}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0018ad47f7408711ed7c2ffa1fe5e869357801a79088ca1ed442cae459117fb660560359d69a485bcfce61a3b4387a9a"]) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) [ 1715.435555][T31264] EXT4-fs (loop4): bad geometry: first data block 57088 is beyond end of filesystem (512) [ 1715.439989][T31265] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1715.473760][T31265] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1715.480407][T31265] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1715.493055][T31265] EXT4-fs (loop3): Remounting filesystem read-only [ 1715.499586][T31265] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1715.513671][T31265] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1715.520323][T31265] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1715.535685][T31275] loop4: detected capacity change from 0 to 1054 16:59:58 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000062000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1715.545032][T31275] EXT4-fs (loop4): bad geometry: first data block 57088 is beyond end of filesystem (512) 16:59:58 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffffffe200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:58 executing program 0: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'netdevsim0\x00', 0x2}, 0x18) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x1029) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="0100030001000000180000007164e0d179ccc5e1422f7677cc2dab95a3aec544ede0083ebc841041ff2c50ed8909d6b7a164b249529ced52b2e5a9d085704e0700"/75, @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4f23, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x100, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='veth1_macvtap\x00', 0xffffffffffffffff, 0x80000001}) [ 1715.815246][T31296] loop4: detected capacity change from 0 to 1054 [ 1715.828422][T31300] loop3: detected capacity change from 0 to 1054 [ 1715.835157][T31296] EXT4-fs (loop4): bad geometry: first data block 58111 is beyond end of filesystem (512) [ 1715.850717][T31300] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1715.862709][T31404] loop4: detected capacity change from 0 to 1054 [ 1715.862953][T31300] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1715.875605][T31300] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1715.887942][T31300] EXT4-fs (loop3): Remounting filesystem read-only [ 1715.888233][T31404] EXT4-fs (loop4): bad geometry: first data block 58111 is beyond end of filesystem (512) 16:59:58 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:58 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000364000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1715.894490][T31300] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1715.918315][T31300] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1715.925066][T31300] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:58 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc336, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="d45c57c6a7ecbb3e735d09900185f70491cab10cda42eea56e645d69392eb1d0cf6fc6a71a05866b75ecc7c780172072a2d9eace9ab8c528aa69abd51f33e9be5ce73164498ed174e38cbb21f2587da268a861a2b8bd42df8b4e7b3e38a4039ea6183f2396c05ea084732fbae80d1a57b2f0f73cebb9", 0x76, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="d0ed1ee5c761323ad7fc2663e877e6e2f907aa64c5e63268", 0x18, 0xa05, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000700)="0e3bf598064b7099314e87b93e56155a25c577b9753dd5d42b7d4fdfc3a6f6ccc640073d09eb18c18bf9df34efd9a610be8facdb1f27aeb5cb2ced1aab0a2ff2442944ccf0af2ec8cf6de2ef9d64787de1ef930332f929", 0x57}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1f, r0, &(0x7f0000000580)="b5d2dfcb1885776c5b4a2a1a48b8b07ba1722ba33cc74cf19737bacc6902b0af33811bd85484df6c9549e03cd2c70fa8a18a05f4445922541291d12d4bc8a506586ea2628b612d364d49a4b30fa0a31e8f8236b63043d34d0f5384daef84934352473e3e78c3ba3d8d6870734d4a283587b26230f937390f27e745d4471b657d2480d76179861eef81eb82d9bfbd1b0c5efb127d557029577701b404db6deefa130d08a049e9227771060406d5351088ef378f067b230d65956c7913447a854fd9567c661c0528125d8b3d349f6d", 0xce, 0x4, 0x0, 0x0, r6}]) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x10000d, r5, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) 16:59:58 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000ea00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:58 executing program 0: r0 = syz_io_uring_setup(0x15b4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x4000)=nil, 0x4000, 0x300000b, 0x2010, r0, 0x10000000) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xef85) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x8a02, 0x23456, {0x0, r6}}, 0x7873) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfdb4, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRES16=r6, @ANYRES16=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="070083dbd028240002"], 0x28}}, 0xc000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000500)={0xa, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x1, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x200002, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @struct={0x8ee, 0x7}, 0x0, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe28, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={0x0, 0x4, 0x8}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x2, @inherit={0x80, &(0x7f0000001880)=ANY=[@ANYBLOB="00000000000000000700000000000000ff01000000000000010100000000000000000000000000000100000400000000010000000000000000000000000000000000008000000000000000e00000000003000000000000000700000000000000fffeffffffffffff080000000000000000020000000000000104000000000000"]}, @devid}) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007008000a000", 0x33a) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FSYNC, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000001900)=ANY=[@ANYBLOB="01000000000000160000a6693917ee119dbd5c2579038e217cfb948204944a22541bee60ac306dbe3cf1c300"/54]) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 16:59:58 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1716.235644][T31430] loop4: detected capacity change from 0 to 1054 [ 1716.244315][T31432] loop3: detected capacity change from 0 to 1054 [ 1716.251713][T31429] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1716.274446][T31432] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1716.284630][T31430] EXT4-fs (loop4): bad geometry: first data block 59904 is beyond end of filesystem (512) [ 1716.297866][T31429] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1716.319168][T31432] EXT4-fs (loop3): orphan cleanup on readonly fs 16:59:59 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x3, 0x8, 0x0) mremap(&(0x7f0000196000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000090f000/0x3000)=nil) mbind(&(0x7f0000bd4000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) syz_open_dev$rtc(&(0x7f00000001c0), 0x93, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="c955e30100000001d4cbf7ff000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_io_uring_setup(0x5b, &(0x7f00000000c0)={0x0, 0xcf8b, 0x20, 0x3, 0xc0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000544000/0xa000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x63ad, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x2, 0xdc, 0x0, r4}, &(0x7f00003d0000/0x2000)=nil, &(0x7f00005ad000/0x4000)=nil, &(0x7f0000000380), 0x0) mbind(&(0x7f0000597000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) [ 1716.325674][T31432] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1716.344899][T31442] loop4: detected capacity change from 0 to 1054 [ 1716.359274][T31442] EXT4-fs (loop4): bad geometry: first data block 59904 is beyond end of filesystem (512) 16:59:59 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000365000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1716.387527][T31432] EXT4-fs (loop3): Remounting filesystem read-only [ 1716.394111][T31432] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1716.408023][T31432] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1716.414624][T31432] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 16:59:59 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000002ea00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:59 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc336, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="d45c57c6a7ecbb3e735d09900185f70491cab10cda42eea56e645d69392eb1d0cf6fc6a71a05866b75ecc7c780172072a2d9eace9ab8c528aa69abd51f33e9be5ce73164498ed174e38cbb21f2587da268a861a2b8bd42df8b4e7b3e38a4039ea6183f2396c05ea084732fbae80d1a57b2f0f73cebb9", 0x76, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="d0ed1ee5c761323ad7fc2663e877e6e2f907aa64c5e63268", 0x18, 0xa05, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000700)="0e3bf598064b7099314e87b93e56155a25c577b9753dd5d42b7d4fdfc3a6f6ccc640073d09eb18c18bf9df34efd9a610be8facdb1f27aeb5cb2ced1aab0a2ff2442944ccf0af2ec8cf6de2ef9d64787de1ef930332f929", 0x57}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1f, r0, &(0x7f0000000580)="b5d2dfcb1885776c5b4a2a1a48b8b07ba1722ba33cc74cf19737bacc6902b0af33811bd85484df6c9549e03cd2c70fa8a18a05f4445922541291d12d4bc8a506586ea2628b612d364d49a4b30fa0a31e8f8236b63043d34d0f5384daef84934352473e3e78c3ba3d8d6870734d4a283587b26230f937390f27e745d4471b657d2480d76179861eef81eb82d9bfbd1b0c5efb127d557029577701b404db6deefa130d08a049e9227771060406d5351088ef378f067b230d65956c7913447a854fd9567c661c0528125d8b3d349f6d", 0xce, 0x4, 0x0, 0x0, r6}]) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x10000d, r5, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) [ 1716.613720][T31557] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1716.627802][T31561] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 16:59:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$notify(r0, 0x402, 0xb1c661d318500c59) preadv2(r0, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/171, 0xab}], 0x1, 0x0, 0x0, 0x15) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{0x77359400}, 0x14, 0x7, 0x5}, {{}, 0x2, 0x81, 0x7}, {{}, 0x14, 0x101}, {{0x77359400}, 0x15, 0x4af, 0xa112}, {{r1, r2/1000+60000}, 0xd1b6764bdc5e6308, 0x1}, {{r3, r4/1000+10000}, 0x12, 0x0, 0x6}, {{}, 0x15, 0x800, 0x7fff}, {{0x0, 0x2710}, 0x1, 0x7, 0x8}, {{0x0, 0x2710}, 0x15, 0x8, 0x5}, {{0x77359400}, 0x11, 0x41b3, 0x7}], 0xf0) [ 1716.661067][T31568] loop4: detected capacity change from 0 to 1054 [ 1716.671282][T31567] loop3: detected capacity change from 0 to 1054 [ 1716.682644][T31568] EXT4-fs (loop4): bad geometry: first data block 59906 is beyond end of filesystem (512) [ 1716.693453][T31567] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1716.706693][T31567] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1716.713180][T31567] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1716.725980][T31567] EXT4-fs (loop3): Remounting filesystem read-only [ 1716.732674][T31567] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1716.746599][T31567] EXT4-fs (loop3): Cannot turn on quotas: error -22 16:59:59 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000366000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1716.753276][T31567] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1716.768034][T31576] loop4: detected capacity change from 0 to 1054 [ 1716.791450][T31576] EXT4-fs (loop4): bad geometry: first data block 59906 is beyond end of filesystem (512) [ 1716.905930][ T23] audit: type=1400 audit(1636131599.562:2464): avc: denied { watch_reads } for pid=31589 comm="syz-executor.0" path="/proc/31589" dev="proc" ino=341258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 16:59:59 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 16:59:59 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffff000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 16:59:59 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x4d) tkill(r0, 0x3a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace(0x4208, r0) fsync(0xffffffffffffffff) 16:59:59 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0xc336, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x0, {0x4}}, 0x14) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)="d45c57c6a7ecbb3e735d09900185f70491cab10cda42eea56e645d69392eb1d0cf6fc6a71a05866b75ecc7c780172072a2d9eace9ab8c528aa69abd51f33e9be5ce73164498ed174e38cbb21f2587da268a861a2b8bd42df8b4e7b3e38a4039ea6183f2396c05ea084732fbae80d1a57b2f0f73cebb9", 0x76, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="d0ed1ee5c761323ad7fc2663e877e6e2f907aa64c5e63268", 0x18, 0xa05, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x100, r4, &(0x7f0000000700)="0e3bf598064b7099314e87b93e56155a25c577b9753dd5d42b7d4fdfc3a6f6ccc640073d09eb18c18bf9df34efd9a610be8facdb1f27aeb5cb2ced1aab0a2ff2442944ccf0af2ec8cf6de2ef9d64787de1ef930332f929", 0x57}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x1f, r0, &(0x7f0000000580)="b5d2dfcb1885776c5b4a2a1a48b8b07ba1722ba33cc74cf19737bacc6902b0af33811bd85484df6c9549e03cd2c70fa8a18a05f4445922541291d12d4bc8a506586ea2628b612d364d49a4b30fa0a31e8f8236b63043d34d0f5384daef84934352473e3e78c3ba3d8d6870734d4a283587b26230f937390f27e745d4471b657d2480d76179861eef81eb82d9bfbd1b0c5efb127d557029577701b404db6deefa130d08a049e9227771060406d5351088ef378f067b230d65956c7913447a854fd9567c661c0528125d8b3d349f6d", 0xce, 0x4, 0x0, 0x0, r6}]) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x10000d, r5, 0x0, 0xffffffe4}) open(&(0x7f0000000100)='./file0\x00', 0x44a01, 0x21) [ 1717.145779][T31699] loop3: detected capacity change from 0 to 1054 [ 1717.171263][T31699] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1717.184954][T31699] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1717.191381][T31699] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1717.214451][T31703] loop4: detected capacity change from 0 to 1054 [ 1717.230274][T31699] EXT4-fs (loop3): Remounting filesystem read-only 16:59:59 executing program 0: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r4 = socket$inet(0x2, 0x3, 0x1) r5 = dup(r4) sendmmsg$unix(r5, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="82d7c0a692784a1d447c9b71f2fc64858dc1f25ec8a984ffef5bc380cdf0d1def711fc92327297a2928d590c9b9eda19a2acb2872c21df9a60cf9374c99dcd9d8e3f0963f658c2cf19be32f3cd5b500972003124fc40901f03172c3b26ea3d81b54b3e57c89c2c718d8b948a3838140fa7615d89e7af501001353471becfc5b1c4cc9fc387070000009258f4c603ca5ae13b4b"], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000003190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1717.236830][T31699] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1717.251932][T31699] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1717.258564][T31699] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1717.279361][T31703] EXT4-fs (loop4): bad geometry: first data block 61695 is beyond end of filesystem (512) 17:00:00 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:00 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000068000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:00 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffff600000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1717.326066][T31714] loop4: detected capacity change from 0 to 1054 [ 1717.341179][T31714] EXT4-fs (loop4): bad geometry: first data block 61695 is beyond end of filesystem (512) [ 1717.678345][ C0] sd 0:0:1:0: tag#4325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1717.688382][ C0] sd 0:0:1:0: tag#4325 CDB: opcode=0xe5 (vendor) [ 1717.694737][ C0] sd 0:0:1:0: tag#4325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1717.703777][ C0] sd 0:0:1:0: tag#4325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1717.712821][ C0] sd 0:0:1:0: tag#4325 CDB[20]: ba [ 1717.722407][T31830] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1717.743899][T31830] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1717.771791][ C0] sd 0:0:1:0: tag#4338 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1717.781824][ C0] sd 0:0:1:0: tag#4338 CDB: opcode=0xe5 (vendor) [ 1717.788248][ C0] sd 0:0:1:0: tag#4338 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1717.797306][ C0] sd 0:0:1:0: tag#4338 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1717.806357][ C0] sd 0:0:1:0: tag#4338 CDB[20]: ba [ 1717.814124][T31830] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1717.827645][T31835] loop3: detected capacity change from 0 to 1054 [ 1717.841371][T31831] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:00:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f0000000340)='\x00\xc2\xea\x99\xbb\x1c\xf8jw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19\xe5\xbcJ6\xfc\xa8\xcdj\xc1F\x02\x93\xca`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r3, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x42, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 1717.876523][T31835] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1717.896873][T31840] loop4: detected capacity change from 0 to 1054 [ 1717.905513][T31835] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1717.912018][T31835] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 17:00:00 executing program 5: pipe(&(0x7f0000000040)) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xb0000001}) ppoll(&(0x7f00000009c0)=[{r0}], 0x1, &(0x7f0000000a00)={0x0, 0x989680}, 0x0, 0x0) [ 1717.932582][T31835] EXT4-fs (loop3): Remounting filesystem read-only [ 1717.939274][T31835] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1717.953333][T31835] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1717.960017][T31835] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:00 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00036b000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1717.991295][T31840] EXT4-fs (loop4): bad geometry: first data block 63231 is beyond end of filesystem (512) [ 1718.062605][T31848] loop4: detected capacity change from 0 to 1054 [ 1718.071056][T31848] EXT4-fs (loop4): bad geometry: first data block 63231 is beyond end of filesystem (512) 17:00:00 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffdf900000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:00 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:00 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x75fdcba0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10600c2, 0x0) r2 = creat(&(0x7f0000004f80)='./bus\x00', 0x0) io_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x126, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ftruncate(r2, 0x208200) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x8, 0x0, 0x100, 0x3ff, 0x1000008}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) fallocate(r4, 0x24, 0xfffffffffffffff8, 0x401) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000400)={{0x0, 0x3f, 0x1, 0x6, 0x2, 0xffff, 0x6, 0xa20d, 0x6, 0x8, 0x366, 0x2, 0x20, 0x9, 0x7ff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{r5, 0x2, 0x5cbc, 0x1, 0x9, 0x4, 0x100, 0x5, 0x1, 0x1, 0x3ff, 0x10000, 0x1f, 0x100000001, 0x6}, 0x10, [0x0, 0x0]}) 17:00:00 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock2(&(0x7f0000125000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f00007ec000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000896000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) [ 1718.322122][T31970] loop3: detected capacity change from 0 to 1054 [ 1718.337429][T31970] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1718.348623][T31970] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1718.355078][T31970] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 17:00:01 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00006c000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1718.367327][T31970] EXT4-fs (loop3): Remounting filesystem read-only [ 1718.373887][T31970] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1718.387845][T31970] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1718.394544][T31970] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1718.445518][T31979] loop4: detected capacity change from 0 to 1054 [ 1718.459269][T31979] EXT4-fs (loop4): bad geometry: first data block 63997 is beyond end of filesystem (512) [ 1718.509218][T31984] loop4: detected capacity change from 0 to 1054 [ 1718.528345][T31984] EXT4-fs (loop4): bad geometry: first data block 63997 is beyond end of filesystem (512) 17:00:01 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffffb00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1718.616919][T31999] loop3: detected capacity change from 0 to 1054 [ 1718.629516][T31999] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1718.642606][T31999] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1718.649110][T31999] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1718.680012][T31999] EXT4-fs (loop3): Remounting filesystem read-only [ 1718.686557][T31999] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1718.700492][T31999] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1718.707072][T31999] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:01 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:01 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000074000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:01 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0xfffffffc, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38020}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="3ae2a8b7009479613b72d4b4c3a6c9bddc000000000000000000", @ANYBLOB, @ANYBLOB="000427bd7000ffdbdf251100", @ANYBLOB], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x20000804) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x8054) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x101, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x8010) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="020026bdbc000000df250a000000080001007063690011000200303030303a30303a31302e30000000000800030000002000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) clone(0x0, &(0x7f0000000740)="1133383464f76d652aaa0ca9643136c31e74837775945f1f6d57bbfd34a26445bf6fa918", 0x0, &(0x7f0000000800), &(0x7f0000000840)="45db8738464d1e05aa9ac7802921918c8888e76e9a165cfe45844af8c9a73dc4a1bba2e01627ba622d1b76cd684d78ea7229e652f66dd94b") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) write$binfmt_misc(r2, &(0x7f0000000d40)=ANY=[], 0xfffffecc) fsetxattr$security_capability(r1, &(0x7f0000000700), &(0x7f0000000780)=@v1={0x1000000, [{0x80000001, 0x1000}]}, 0xc, 0x3) write$P9_RLERRORu(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xb0) [ 1718.850298][T32108] loop4: detected capacity change from 0 to 1054 [ 1718.863022][T32108] EXT4-fs (loop4): bad geometry: first data block 64511 is beyond end of filesystem (512) [ 1718.926384][T32116] loop4: detected capacity change from 0 to 1054 [ 1718.934553][T32116] EXT4-fs (loop4): bad geometry: first data block 64511 is beyond end of filesystem (512) 17:00:01 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffdfd00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:01 executing program 0: io_setup(0xdc, &(0x7f0000000000)=0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = dup3(r1, r1, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x200000007, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4e3352aa, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000780)={{r4}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xef85) socketpair(0x5, 0x80000, 0x3ff, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000240)) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r0, 0xa, &(0x7f0000002f00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="01d373d36a428a27ff37bff987d9030931cf4f75fa2f", 0x16, 0x0, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff, &(0x7f0000000600)="daf4b1754a4e47593677c06f10ee2a2df033d0386a8b416596cf5dba9484b8ab4335af03", 0x24, 0x1f, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x3d5b, 0xffffffffffffffff, &(0x7f0000000680)="de76ce02528d2c3d9656badbee43e36713f70b220e6a680dbe92bf6dfc65349950d7d69e153c98", 0x27, 0x0, 0x0, 0x2}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000700)="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", 0xfe, 0xaa4, 0x0, 0x1}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x81, 0xffffffffffffffff, &(0x7f00000018c0)="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", 0xff, 0xfffffffffffff24c, 0x0, 0x3}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000001a40)="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", 0x1000, 0x40, 0x0, 0x0, r1}, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f0000002a80)="f12a9ca6ff7f4be1ddb31b9b8e0058bdcc0edf7ee15fa8d7b612726ee8d8e06388455bcc5188192e7b29c060857c84884317542b62ea4b2dc96049dba4465aa31e7f6d7260f61884e080695f634d12fbfa7a5e5716c5e462567f69ae51fde3e96cde7c5a6383f7b2c320e306ead1b9e832d49f4d2bf4332f59376cf7125dd5feb3252a5ba3fb7e1e1f6d5752ed87c50aa224e420f8992380da5bab0929c1cd9b978a9872f5fd6c97cb95cf177aa136a8429531aa1dae42c82f09b40f034cf6abcd", 0xc1, 0x1, 0x0, 0x1, r5}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f0000002c00)="2a74c936d36f53f97115a197145c94503bb46435e0d4a6610c007a2e505ea535fe9dbb9565147d3468cfdb6a3a76ff4e5220120e5a7f788f19cbecf52201b0791009bc7661d5fa1d83bb8b590e225c6f135cd1a390c8d80b53ada8d412bde902d83dab367203e42e5ace9365cf85", 0x6e, 0x3f, 0x0, 0x3}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x1, 0x7f, r7, &(0x7f0000002cc0)="0b55e9d725985adc6990789d9026cf59cf986542e493a302602bf907e4cf193c9216d28dfbd6216dd892a2c96caa8d6b537744b565e56c2d2a8de2570d2eba5a27c55e9f871317a23b1a55e032c007cc74e279355ffc921f90d7d94896faf1bf34055b8d536b88cd4fbef0986e247ba29c1edf913d10cc575b1014fff33f7729b6a9bb8a424201b86095a756c75a8af77522353ec57c8c", 0x97, 0xff1, 0x0, 0x3}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x7, 0x8000, r8, &(0x7f0000000400)="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", 0x114, 0x8, 0x0, 0x2}]) r9 = socket$unix(0x1, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x2}]) [ 1719.081219][T32129] 9pnet: Insufficient options for proto=fd [ 1719.113873][T32131] loop3: detected capacity change from 0 to 1054 17:00:01 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1719.158607][T32131] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1719.185697][T32131] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1719.192172][T32131] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1719.210430][T32131] EXT4-fs (loop3): Remounting filesystem read-only [ 1719.216996][T32131] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1719.230913][T32131] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1719.237549][T32131] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:02 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00007a000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1719.297893][T32240] loop4: detected capacity change from 0 to 1054 [ 1719.333537][T32240] EXT4-fs (loop4): bad geometry: first data block 65021 is beyond end of filesystem (512) 17:00:02 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) [ 1719.382110][T32248] loop4: detected capacity change from 0 to 1054 [ 1719.394357][T32248] EXT4-fs (loop4): bad geometry: first data block 65021 is beyond end of filesystem (512) 17:00:02 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffffe00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1719.492379][ C0] sd 0:0:1:0: tag#4305 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1719.502227][ C0] sd 0:0:1:0: tag#4305 CDB: opcode=0xe5 (vendor) [ 1719.508554][ C0] sd 0:0:1:0: tag#4305 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1719.517595][ C0] sd 0:0:1:0: tag#4305 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1719.526626][ C0] sd 0:0:1:0: tag#4305 CDB[20]: ba [ 1719.560722][T32264] loop3: detected capacity change from 0 to 1054 [ 1719.578506][T32264] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1719.589159][T32264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1719.595656][T32264] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1719.607706][T32264] EXT4-fs (loop3): Remounting filesystem read-only [ 1719.614255][T32264] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1719.628349][T32264] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1719.634951][T32264] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:02 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00007f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1719.648915][ T23] audit: type=1326 audit(1636131602.302:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b4acddae9 code=0x0 [ 1719.718246][T32276] loop4: detected capacity change from 0 to 1054 [ 1719.735861][T32276] EXT4-fs (loop4): bad geometry: first data block 65279 is beyond end of filesystem (512) [ 1719.772684][T32282] loop4: detected capacity change from 0 to 1054 [ 1719.780266][T32282] EXT4-fs (loop4): bad geometry: first data block 65279 is beyond end of filesystem (512) 17:00:02 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000000fff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1719.839074][T32293] loop3: detected capacity change from 0 to 1054 [ 1719.859359][T32293] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1719.871813][T32293] EXT4-fs (loop3): orphan cleanup on readonly fs 17:00:02 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1719.878539][T32293] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1719.893239][T32293] EXT4-fs (loop3): Remounting filesystem read-only [ 1719.899866][T32293] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1719.913775][T32293] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1719.920376][T32293] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:02 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000094000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1719.942565][T32302] loop4: detected capacity change from 0 to 1054 [ 1719.975105][T32302] EXT4-fs (loop4): bad geometry: first data block 65295 is beyond end of filesystem (512) [ 1720.003485][T32307] loop4: detected capacity change from 0 to 1054 [ 1720.011042][T32307] EXT4-fs (loop4): bad geometry: first data block 65295 is beyond end of filesystem (512) 17:00:02 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffffbff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1720.171105][T32320] loop3: detected capacity change from 0 to 1054 [ 1720.185916][T32320] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1720.196195][T32320] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1720.202721][T32320] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1720.215634][T32325] loop4: detected capacity change from 0 to 1054 [ 1720.222262][ C1] sd 0:0:1:0: tag#4324 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1720.232114][ C1] sd 0:0:1:0: tag#4324 CDB: opcode=0xe5 (vendor) [ 1720.238438][ C1] sd 0:0:1:0: tag#4324 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1720.247491][ C1] sd 0:0:1:0: tag#4324 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1720.256558][ C1] sd 0:0:1:0: tag#4324 CDB[20]: ba 17:00:02 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1720.280452][T32320] EXT4-fs (loop3): Remounting filesystem read-only [ 1720.287102][T32320] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1720.300273][T32325] EXT4-fs (loop4): bad geometry: first data block 65531 is beyond end of filesystem (512) [ 1720.301059][T32320] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1720.317498][T32320] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:03 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00009a000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:03 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) mq_notify(r1, &(0x7f0000000480)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) 17:00:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:03 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000003ffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1720.354812][T32340] loop4: detected capacity change from 0 to 1054 [ 1720.373887][T32340] EXT4-fs (loop4): bad geometry: first data block 65531 is beyond end of filesystem (512) [ 1720.439080][ T23] audit: type=1326 audit(1636131603.092:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b4acddae9 code=0x0 17:00:03 executing program 5: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x1d, 0x2}, @cond=[{0x1000, 0x3, 0x0, 0x2}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x100) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x80000002}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) [ 1720.582662][T32358] loop3: detected capacity change from 0 to 1054 [ 1720.593657][T32358] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1720.594810][T32361] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1720.613974][T32363] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1720.615951][T32358] EXT4-fs (loop3): orphan cleanup on readonly fs 17:00:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1720.628502][T32358] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1720.655172][T32358] EXT4-fs (loop3): Remounting filesystem read-only [ 1720.661743][T32358] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1720.663614][T32367] loop4: detected capacity change from 0 to 1054 17:00:03 executing program 0: r0 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x0) readahead(r0, 0x4, 0x200) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r0, r0, &(0x7f0000000280)=0xfffffffffffff001, 0x3ff) sendfile(r1, r2, 0x0, 0xef85) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="d4fca15f000000002e2f4e696c653000"]) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2e}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x84) getdents64(r2, &(0x7f0000000140)=""/207, 0xcf) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='pipefs\x00', &(0x7f0000000080)='source', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000040)='source', &(0x7f00000000c0)='}\x00', 0x0) 17:00:03 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00009b000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1720.675670][T32358] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1720.688600][T32358] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1720.690437][T32367] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1720.780272][T32378] loop4: detected capacity change from 0 to 1054 [ 1720.788127][T32378] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:03 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:00:03 executing program 5: set_mempolicy(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8001, &(0x7f0000000040)=0x1, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) 17:00:03 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00001fffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1720.929841][T32493] loop3: detected capacity change from 0 to 1054 [ 1720.949867][T32493] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1720.961142][T32493] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1720.967652][T32493] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 17:00:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 17:00:03 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00039c000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1720.979798][T32493] EXT4-fs (loop3): Remounting filesystem read-only [ 1720.986347][T32493] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1721.000344][T32493] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1721.006929][T32493] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:03 executing program 5: creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') set_mempolicy(0x1, &(0x7f0000000040)=0x1, 0x405) syz_io_uring_setup(0x6963, &(0x7f00000007c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000840), &(0x7f0000000880)) [ 1721.114050][T32507] loop4: detected capacity change from 0 to 1054 [ 1721.130992][T32507] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:03 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 1721.173490][T32616] loop4: detected capacity change from 0 to 1054 [ 1721.181619][T32616] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:03 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0007eeffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1721.254918][T32627] loop3: detected capacity change from 0 to 1054 [ 1721.272397][T32627] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1721.283727][T32627] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1721.291782][T32627] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 17:00:04 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00009e000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1721.303978][T32627] EXT4-fs (loop3): Remounting filesystem read-only [ 1721.310525][T32627] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1721.324459][T32627] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1721.331166][T32627] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1721.469510][T32743] loop4: detected capacity change from 0 to 1054 [ 1721.486595][T32743] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1721.531354][T32748] loop4: detected capacity change from 0 to 1054 [ 1721.538590][T32748] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1721.562258][T32755] loop3: detected capacity change from 0 to 1054 [ 1721.581400][T32755] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1721.600993][T32755] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1721.607421][T32755] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1721.621680][T32755] EXT4-fs (loop3): Remounting filesystem read-only 17:00:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) 17:00:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x110) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000240)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0), &(0x7f0000000180)={'L-', 0x3}, 0x16, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10000, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) write$cgroup_type(r0, &(0x7f0000000080), 0xfffffe58) [ 1721.628243][T32755] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1721.642356][T32755] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1721.648941][T32755] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1721.758663][ T303] loop5: detected capacity change from 0 to 512 [ 1721.771093][ T303] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1721.785707][ C1] sd 0:0:1:0: tag#4336 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1721.795569][ C1] sd 0:0:1:0: tag#4336 CDB: opcode=0xe5 (vendor) [ 1721.801913][ C1] sd 0:0:1:0: tag#4336 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1721.810959][ C1] sd 0:0:1:0: tag#4336 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1721.820014][ C1] sd 0:0:1:0: tag#4336 CDB[20]: ba 17:00:04 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:04 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fffbffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:04 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00009f000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d80)=ANY=[@ANYBLOB="280000001200010100000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048011}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04191800c5ac59ac4a3764379ddc67002055a067f40284337785375d21949066e971fb0a7a64a47b72ace94bd90075f53dba14eda704bcc98ecf1586fec87c7365e6465c0aa3e0dbbd7790ddb459b7c9d30c79866d55de3e4e3a249efed126287e9d8795128ba8ffb24d0f1d8606b340e9a027a41fe3502ad8c465ed53db3f769207883b66d2a7992e5db3be0cba48f503000000b4283bfe978ce21c2d0c3206239be24bb07ea75572c317158879f8d48fa9790383db98551542e0f97703740226323004446cb9806454e30b1d0164f1dc305f167be058220a361d9c17b83d5a8c36018913e278f9ffffffffffffff9f6409af089325d558962eacf3281a99ef282a9d7aae0fe3fc94d84ff6ec4e92896b1963dcf64005ba30f43e1d7cc3206a8fa9599f057a744c3707f8de8f8eefa968eabe7f484af383bcb3b86c609f9a70599489d372cb05fe575d7791a3dc", @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25620000000c00990004000000370000000600b4006c0b0000155ff45f7f4b16a05e46faf1"], 0x28}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4000) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000240)) bind(r3, &(0x7f00000001c0)=@in={0x2, 0x4e22, @broadcast}, 0x80) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10) socket(0x11, 0x800000003, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r7 = accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @random="1c02ed1c2d05"}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) 17:00:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) 17:00:04 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="f9dbad3f9a33386c6c9909216264e30aaafdef53a3d802d00d833056d618639a71e605130832d39a1fb6435058cff3bfa9132cbacdf6631afc09aaa6a5fb67d22a2052749eca82b9657d382042124d57", 0x50}, {&(0x7f0000000000)="12d6399d5417b2600512a8ecdea6", 0xe}, {&(0x7f0000000440)="12bbb4af7929271669f6fcd3dcdb4fe07dd79ad5e71cca2128423881", 0x1c}], 0x3, 0x3ff, 0xfffffffd) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x0, 0x3) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x3f}, 0xa00, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a600800000000000000e683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x4004) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x2, 0x4, 0x9}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) openat$cgroup_type(r1, &(0x7f0000000140), 0x2, 0x0) fallocate(r0, 0xb, 0x6, 0x820a) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000004c0)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x9) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='wg0\x00', 0x10) fallocate(r0, 0x31, 0x8, 0x100000000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000100)=0x68) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) 17:00:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0) [ 1722.082673][ T435] loop4: detected capacity change from 0 to 1054 [ 1722.082695][ T434] loop3: detected capacity change from 0 to 1054 [ 1722.096310][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.105539][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.115186][ T435] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1722.116093][ T433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=433 comm=syz-executor.0 [ 1722.150618][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.150617][ T445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=445 comm=syz-executor.0 [ 1722.172490][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1722.182831][ T434] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1722.192958][ T447] loop4: detected capacity change from 0 to 1054 [ 1722.200999][ T447] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1722.216768][ T434] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1722.223179][ T434] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1722.238798][ T434] EXT4-fs (loop3): Remounting filesystem read-only [ 1722.245347][ T434] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1722.259383][ T434] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1722.265997][ T434] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0, 0x80}, 0x1c) sendfile(r1, r0, 0x0, 0x7ffff000) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '#,/\xd2\\*(*\'\\\x00'}) 17:00:05 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00f9fdffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:05 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 17:00:05 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000a0000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1722.308523][ T463] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1722.316902][ T463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:00:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4101, 0x1005}], 0x1, 0x0, 0xffffff7f) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x4d) tkill(r1, 0x3a) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f0000000040)='net/dev_snmp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000240)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, r2, 0xa8d76000) [ 1722.542485][ T595] loop4: detected capacity change from 0 to 1054 [ 1722.568660][ T595] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1722.601753][ T603] loop4: detected capacity change from 0 to 1054 [ 1722.608574][ T603] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1722.645375][ T608] loop3: detected capacity change from 0 to 1054 [ 1722.686246][ T608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1722.696695][ T608] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1722.703135][ T608] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1722.715183][ T608] EXT4-fs (loop3): Remounting filesystem read-only [ 1722.721850][ T608] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1722.735762][ T608] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1722.742391][ T608] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:05 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 17:00:05 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="290000001900190f00003fffffffda060200000000e80001dd0000040d001e00", 0x20}, {&(0x7f0000000080)="36a6fde156606e3334c1afd990d5cc8e59f6a4cae15aa175963217d1d8e635a7780a8ea640", 0x25}], 0x2) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="60000000030701030000000000000000020000010c00078008000140000000070c00024000000000002000000240000000000000000908000540000000010800ff03000000030c0003c000000000000006cf0c0003abb1f610000000007e3689c68f0cfa08ab2296e183f227fc32cb3cd5152323f6c4894bffaf82a2e716048905012740a6f339e90b609a610500000000000000c146"], 0x60}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4e367895"], 0x3c}}, 0x0) ftruncate(r3, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r3, 0x0, 0x201000) 17:00:05 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:05 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fdfdffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:05 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000a1000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10020}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000500)={0x6, 0x4, {0x3, @struct={0x0, 0x5}, 0x0, 0x7, 0x6, 0x10001, 0x7, 0x7bc2, 0x4, @struct={0x2, 0x2}, 0x5, 0x1, [0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x4, 0x40c]}, {0x4a, @usage=0x2, 0x0, 0x3, 0x800, 0x0, 0x8, 0x81, 0x428, @struct={0x1, 0x20}, 0x0, 0x2, [0x100000001, 0x1, 0x5, 0x1, 0x8000, 0x9]}, {0x7, @usage=0xffffffff, r0, 0x2, 0x0, 0x0, 0x4, 0x1f, 0x90, @usage=0x102, 0xe0000000, 0x6, [0x8000, 0x9d86, 0x2, 0xf4e, 0x1, 0x3]}, {0x0, 0x9adb, 0x5f2}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x0, 0x5, {0x6fdf, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x0, 0x7, 0x1, 0xfffffffffffffffe, 0xa45]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0x3, 0x4, 0x0, 0x2, 0xff, 0x100000000]}, {0x9, @usage=0x7e47cf27, r0, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x67, @usage=0x7, 0x2, 0x3, [0xfff, 0x5, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000140)={r0, 0x4, 0x8}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000600)={r0, 0xc1, 0x7d}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x307e17}], 0x7, 0x4200, 0x0, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:00:05 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) [ 1723.222817][ T629] loop3: detected capacity change from 0 to 1054 [ 1723.234266][ T635] loop4: detected capacity change from 0 to 1054 [ 1723.258419][ T635] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1723.268509][ T629] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1723.303646][ T629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1723.310081][ T629] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1723.336186][ T744] loop4: detected capacity change from 0 to 1054 17:00:06 executing program 5: sched_setattr(0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002480)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) read(r1, &(0x7f0000000040)=""/9, 0x9) [ 1723.355390][ T629] EXT4-fs (loop3): Remounting filesystem read-only [ 1723.359837][ T744] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1723.362044][ T629] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1723.386044][ T629] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1723.392715][ T629] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:06 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f007fffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:06 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0002a2000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:06 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 1) [ 1723.559800][ T759] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1723.571194][ C0] sd 0:0:1:0: tag#4316 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1723.581072][ C0] sd 0:0:1:0: tag#4316 CDB: opcode=0xe5 (vendor) [ 1723.587399][ C0] sd 0:0:1:0: tag#4316 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1723.596610][ C0] sd 0:0:1:0: tag#4316 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1723.605648][ C0] sd 0:0:1:0: tag#4316 CDB[20]: ba [ 1723.645855][ T765] loop4: detected capacity change from 0 to 1054 [ 1723.659398][ T765] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1723.685082][ T768] FAULT_INJECTION: forcing a failure. [ 1723.685082][ T768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.698405][ T768] CPU: 0 PID: 768 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1723.708069][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1723.718114][ T768] Call Trace: [ 1723.721453][ T768] [ 1723.724378][ T768] dump_stack_lvl+0xd6/0x122 [ 1723.728998][ T768] dump_stack+0x11/0x1b [ 1723.733226][ T768] should_fail+0x23c/0x250 [ 1723.737700][ T768] should_fail_usercopy+0x16/0x20 [ 1723.742730][ T768] _copy_from_user+0x1c/0xd0 [ 1723.747332][ T768] iovec_from_user+0xc4/0x2e0 [ 1723.752014][ T768] __import_iovec+0x57/0x2d0 [ 1723.756606][ T768] ? __rcu_read_unlock+0x5c/0x290 [ 1723.761631][ T768] import_iovec+0x69/0x80 [ 1723.765962][ T768] do_preadv+0x127/0x240 [ 1723.770217][ T768] __x64_sys_preadv+0x54/0x60 [ 1723.774934][ T768] do_syscall_64+0x44/0xa0 [ 1723.779468][ T768] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1723.785366][ T768] RIP: 0033:0x7feb56411ae9 [ 1723.789791][ T768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1723.809403][ T768] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1723.817825][ T768] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1723.825918][ T768] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1723.833894][ T768] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1723.841930][ T768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.849910][ T768] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1723.857891][ T768] [ 1723.868016][ T776] loop4: detected capacity change from 0 to 1054 [ 1723.885036][ T779] loop3: detected capacity change from 0 to 1054 17:00:06 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 2) 17:00:06 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @loopback}, 0x10) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000080)=0xc6, 0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x20, 0x4) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="36525858987c"}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 1723.891853][ T776] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:06 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0085ffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1723.917287][ T779] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1723.943867][ T779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1723.950365][ T779] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1723.965910][ T779] EXT4-fs (loop3): Remounting filesystem read-only [ 1723.972468][ T779] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1723.986406][ T779] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1723.993065][ T779] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1724.113565][ T792] FAULT_INJECTION: forcing a failure. [ 1724.113565][ T792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.126912][ T792] CPU: 1 PID: 792 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1724.136580][ T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.146626][ T792] Call Trace: [ 1724.149892][ T792] [ 1724.152899][ T792] dump_stack_lvl+0xd6/0x122 [ 1724.157492][ T792] dump_stack+0x11/0x1b [ 1724.161721][ T792] should_fail+0x23c/0x250 [ 1724.166137][ T792] should_fail_usercopy+0x16/0x20 [ 1724.171298][ T792] _copy_to_user+0x1c/0x90 [ 1724.175734][ T792] rng_dev_read+0x2bd/0x630 [ 1724.180331][ T792] do_iter_read+0x370/0x5d0 [ 1724.184832][ T792] do_preadv+0x159/0x240 [ 1724.189092][ T792] __x64_sys_preadv+0x54/0x60 [ 1724.193763][ T792] do_syscall_64+0x44/0xa0 [ 1724.198222][ T792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.204112][ T792] RIP: 0033:0x7feb56411ae9 [ 1724.208530][ T792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.228345][ T792] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1724.236761][ T792] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1724.244732][ T792] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1724.252745][ T792] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:06 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:06 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0002a3000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:06 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 3) [ 1724.260723][ T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.268687][ T792] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1724.276745][ T792] 17:00:07 executing program 5: sched_setattr(0x0, 0x0, 0x0) pipe2(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002480)=ANY=[@ANYBLOB="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"]) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) read(r1, &(0x7f0000000040)=""/9, 0x9) [ 1724.388161][ T798] loop4: detected capacity change from 0 to 1054 [ 1724.413331][ T798] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1724.443411][ T905] loop4: detected capacity change from 0 to 1054 [ 1724.450986][ T905] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:07 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f008cffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1724.490614][ T911] loop3: detected capacity change from 0 to 1054 [ 1724.517935][ T911] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1724.529922][ T911] EXT4-fs (loop3): orphan cleanup on readonly fs 17:00:07 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0001b0000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1724.536301][ T911] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1724.548953][ T911] EXT4-fs (loop3): Remounting filesystem read-only [ 1724.555633][ T911] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1724.569542][ T911] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1724.576152][ T911] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1724.632770][ T922] FAULT_INJECTION: forcing a failure. [ 1724.632770][ T922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.646204][ T922] CPU: 0 PID: 922 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1724.655844][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.665905][ T922] Call Trace: [ 1724.669208][ T922] [ 1724.672132][ T922] dump_stack_lvl+0xd6/0x122 [ 1724.676958][ T922] dump_stack+0x11/0x1b [ 1724.681179][ T922] should_fail+0x23c/0x250 [ 1724.685603][ T922] should_fail_usercopy+0x16/0x20 [ 1724.690705][ T922] _copy_to_user+0x1c/0x90 [ 1724.695154][ T922] rng_dev_read+0x2bd/0x630 [ 1724.699705][ T922] do_iter_read+0x370/0x5d0 [ 1724.704225][ T922] do_preadv+0x159/0x240 [ 1724.708518][ T922] __x64_sys_preadv+0x54/0x60 [ 1724.713200][ T922] do_syscall_64+0x44/0xa0 [ 1724.717739][ T922] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1724.723638][ T922] RIP: 0033:0x7feb56411ae9 [ 1724.728051][ T922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1724.747683][ T922] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1724.756102][ T922] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1724.764086][ T922] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1724.772096][ T922] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:07 executing program 1: io_uring_setup(0x0, &(0x7f0000000000)) r0 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:07 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 4) [ 1724.780078][ T922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.788055][ T922] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1724.796239][ T922] [ 1724.865652][ T1031] loop4: detected capacity change from 0 to 1054 [ 1724.873102][ T1030] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1724.885285][ C0] sd 0:0:1:0: tag#4295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1724.895241][ C0] sd 0:0:1:0: tag#4295 CDB: opcode=0xe5 (vendor) [ 1724.901600][ C0] sd 0:0:1:0: tag#4295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1724.910671][ C0] sd 0:0:1:0: tag#4295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1724.919694][ C0] sd 0:0:1:0: tag#4295 CDB[20]: ba [ 1724.939806][ T1031] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1724.973325][ T1038] loop4: detected capacity change from 0 to 1054 [ 1724.980608][ T1038] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:07 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00daffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1725.035886][ T1046] loop3: detected capacity change from 0 to 1054 [ 1725.080298][ T1046] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1725.091589][ T1046] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1725.097983][ T1046] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1725.109795][ T1046] EXT4-fs (loop3): Remounting filesystem read-only [ 1725.116494][ T1046] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1725.130490][ T1046] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1725.137172][ T1046] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1725.154884][ T1153] FAULT_INJECTION: forcing a failure. [ 1725.154884][ T1153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.168048][ T1153] CPU: 0 PID: 1153 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1725.177939][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.187998][ T1153] Call Trace: [ 1725.191280][ T1153] [ 1725.194208][ T1153] dump_stack_lvl+0xd6/0x122 [ 1725.198795][ T1153] dump_stack+0x11/0x1b [ 1725.202947][ T1153] should_fail+0x23c/0x250 [ 1725.207370][ T1153] should_fail_usercopy+0x16/0x20 [ 1725.212401][ T1153] _copy_to_user+0x1c/0x90 [ 1725.216917][ T1153] rng_dev_read+0x2bd/0x630 [ 1725.221429][ T1153] do_iter_read+0x370/0x5d0 [ 1725.225934][ T1153] do_preadv+0x159/0x240 [ 1725.230237][ T1153] __x64_sys_preadv+0x54/0x60 [ 1725.234914][ T1153] do_syscall_64+0x44/0xa0 [ 1725.239391][ T1153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.245361][ T1153] RIP: 0033:0x7feb56411ae9 [ 1725.249777][ T1153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.269390][ T1153] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1725.277819][ T1153] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1725.285809][ T1153] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1725.293839][ T1153] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.301836][ T1153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.309815][ T1153] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1725.317789][ T1153] 17:00:08 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000ac0), 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1c000000, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xef85) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r4 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2800, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r8 = syz_open_dev$loop(&(0x7f0000000ac0), 0x7, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r8) 17:00:08 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0003c1000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:08 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:08 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 5) [ 1725.362191][ T1161] loop4: detected capacity change from 0 to 1054 [ 1725.394212][ T1161] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1725.442298][ T1166] loop4: detected capacity change from 0 to 1054 [ 1725.449778][ T1166] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:08 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00e2ffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1725.662022][ T1180] FAULT_INJECTION: forcing a failure. [ 1725.662022][ T1180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.675257][ T1180] CPU: 1 PID: 1180 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1725.684976][ T1180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.695099][ T1180] Call Trace: [ 1725.698369][ T1180] [ 1725.701296][ T1180] dump_stack_lvl+0xd6/0x122 [ 1725.705886][ T1180] dump_stack+0x11/0x1b [ 1725.710098][ T1180] should_fail+0x23c/0x250 [ 1725.714587][ T1180] should_fail_usercopy+0x16/0x20 [ 1725.719647][ T1180] _copy_to_user+0x1c/0x90 [ 1725.724189][ T1180] rng_dev_read+0x2bd/0x630 [ 1725.728774][ T1180] do_iter_read+0x370/0x5d0 [ 1725.733328][ T1180] do_preadv+0x159/0x240 [ 1725.737574][ T1180] __x64_sys_preadv+0x54/0x60 [ 1725.742288][ T1180] do_syscall_64+0x44/0xa0 [ 1725.746966][ T1180] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1725.752923][ T1180] RIP: 0033:0x7feb56411ae9 [ 1725.757403][ T1180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1725.777210][ T1180] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1725.785627][ T1180] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1725.793595][ T1180] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1725.801671][ T1180] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1725.809894][ T1180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.817981][ T1180] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1725.825949][ T1180] 17:00:08 executing program 5: socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @private0, 0x81}, 0x1c) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6(0xa, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000000c0)={{}, {0x0, 0x1}, 0x6}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000140)={0x2, {{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x88) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x19, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d4", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r6}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {r5, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {r6}, {}, {}, {}, {r5}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {r6}, {}, {0x0, r7}, {}, {}, {r6}, {r5}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {r6}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r5}, {0x0, r7}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {r6}, {r5, r7}, {}, {}, {}, {r6}, {r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051900)={0xee1, [], 0x0, "b28a8b2be18979"}) write$sndseq(r2, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) 17:00:08 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 6) [ 1725.855789][ T1184] loop3: detected capacity change from 0 to 1054 [ 1725.880316][ T1184] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1725.891025][ T1184] EXT4-fs (loop3): orphan cleanup on readonly fs 17:00:08 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0003d4000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1725.897415][ T1184] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1725.909449][ T1184] EXT4-fs (loop3): Remounting filesystem read-only [ 1725.916001][ T1184] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1725.929953][ T1184] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1725.936548][ T1184] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1725.949047][ T1189] loop4: detected capacity change from 0 to 1054 17:00:08 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00f0ffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1725.988649][ T1189] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1726.145901][ T1205] FAULT_INJECTION: forcing a failure. [ 1726.145901][ T1205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.159145][ T1205] CPU: 1 PID: 1205 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1726.168887][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.178933][ T1205] Call Trace: [ 1726.182223][ T1205] [ 1726.185148][ T1205] dump_stack_lvl+0xd6/0x122 [ 1726.189741][ T1205] dump_stack+0x11/0x1b [ 1726.193889][ T1205] should_fail+0x23c/0x250 [ 1726.198312][ T1205] should_fail_usercopy+0x16/0x20 [ 1726.203382][ T1205] _copy_to_user+0x1c/0x90 [ 1726.207796][ T1205] rng_dev_read+0x2bd/0x630 [ 1726.212384][ T1205] do_iter_read+0x370/0x5d0 [ 1726.216925][ T1205] do_preadv+0x159/0x240 [ 1726.221167][ T1205] __x64_sys_preadv+0x54/0x60 [ 1726.225852][ T1205] do_syscall_64+0x44/0xa0 [ 1726.230306][ T1205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1726.236221][ T1205] RIP: 0033:0x7feb56411ae9 [ 1726.240707][ T1205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.260312][ T1205] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1726.268728][ T1205] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1726.276693][ T1205] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1726.284750][ T1205] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.292772][ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.300739][ T1205] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1726.308711][ T1205] 17:00:09 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 7) 17:00:09 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00f6ffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1726.368782][ T1222] loop3: detected capacity change from 0 to 1054 [ 1726.389366][ T1222] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) 17:00:09 executing program 5: ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f00000000c0)={&(0x7f0000000040)=""/70, 0x46}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000140)={0x8, 0x253, 0xffffffc0, 0x2, 0x943d}) syz_mount_image$iso9660(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x0, 0x0, &(0x7f0000002e40), 0x0, &(0x7f0000003000)=ANY=[@ANYBLOB='map=normal,defcontext=s']) [ 1726.432442][ T1222] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1726.439117][ T1222] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1726.453313][ T1222] EXT4-fs (loop3): Remounting filesystem read-only [ 1726.459839][ T1222] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1726.469266][ T1321] FAULT_INJECTION: forcing a failure. [ 1726.469266][ T1321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.473746][ T1222] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1726.473765][ T1222] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1726.504972][ T1321] CPU: 1 PID: 1321 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1726.514868][ T1321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.524945][ T1321] Call Trace: [ 1726.528219][ T1321] [ 1726.531144][ T1321] dump_stack_lvl+0xd6/0x122 [ 1726.535738][ T1321] dump_stack+0x11/0x1b [ 1726.539890][ T1321] should_fail+0x23c/0x250 [ 1726.544345][ T1321] should_fail_usercopy+0x16/0x20 [ 1726.549436][ T1321] _copy_to_user+0x1c/0x90 [ 1726.553851][ T1321] rng_dev_read+0x2bd/0x630 [ 1726.558396][ T1321] do_iter_read+0x370/0x5d0 [ 1726.562921][ T1321] do_preadv+0x159/0x240 [ 1726.567165][ T1321] __x64_sys_preadv+0x54/0x60 [ 1726.571851][ T1321] do_syscall_64+0x44/0xa0 [ 1726.576316][ T1321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1726.582215][ T1321] RIP: 0033:0x7feb56411ae9 [ 1726.586670][ T1321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.606363][ T1321] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1726.614777][ T1321] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1726.622747][ T1321] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1726.630806][ T1321] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.638776][ T1321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.647051][ T1321] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1726.655068][ T1321] 17:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0x21, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x28, 0xa9, 0x0, 0x0, 0x4, 0x80400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000340)}, 0x2008, 0x50, 0x3, 0x1, 0x3, 0x2, 0xcb4e, 0x0, 0x7fff, 0x0, 0x4}, 0x0, 0xd, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)}], 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="100000000000000001000000010000001c0000000000000002000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000780)) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000003190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000008cb621ad4fd7fb2b0c2d4b543f453c4b10d3c21552b1541e9d5cff54a13a439adc85af8636dfc604d820bc5e0ba73d27da9baa0acdea35f9a63b6fe11e5418c3a127667e7b8656cefb764b9785adbc02f09fb81dca21bd1785f3010d37a2f0cf69b36a44c18e9002d407880a059d55440541e1f97e7f8d8cea2783c909dfa1cbe2830ae38bbafc485bd2ce6c083292a23fe7ab168a82c1", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf25630000000c0099000600000074000000"], 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x24000001) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 17:00:09 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000ea000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:09 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 8) 17:00:09 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1726.759902][ T1333] loop4: detected capacity change from 0 to 1054 [ 1726.775524][ T1330] ISOFS: Unable to identify CD-ROM format. [ 1726.784597][ T1333] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:09 executing program 5: r0 = socket(0x1d, 0x2, 0xff) sendmmsg$unix(r0, &(0x7f00000077c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="e3c6703a8a68338bc1c75bda712724c0b6c9a129ea8a04cc1eba1fde99c33ccb99cc5fafa1dcb639", 0x28}], 0x1}}], 0x1, 0xa00) [ 1726.815076][ T1387] loop4: detected capacity change from 0 to 1054 [ 1726.823014][ T1387] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1726.853266][ T1451] FAULT_INJECTION: forcing a failure. [ 1726.853266][ T1451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.866819][ T1451] CPU: 0 PID: 1451 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1726.876542][ T1451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1726.886631][ T1451] Call Trace: [ 1726.889906][ T1451] [ 1726.892858][ T1451] dump_stack_lvl+0xd6/0x122 [ 1726.897456][ T1451] dump_stack+0x11/0x1b [ 1726.901830][ T1451] should_fail+0x23c/0x250 [ 1726.906267][ T1451] should_fail_usercopy+0x16/0x20 [ 1726.911481][ T1451] _copy_to_user+0x1c/0x90 [ 1726.915978][ T1451] rng_dev_read+0x2bd/0x630 [ 1726.920529][ T1451] do_iter_read+0x370/0x5d0 [ 1726.925116][ T1451] do_preadv+0x159/0x240 [ 1726.929379][ T1451] __x64_sys_preadv+0x54/0x60 [ 1726.934134][ T1451] do_syscall_64+0x44/0xa0 [ 1726.934686][ C1] sd 0:0:1:0: tag#4311 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1726.938560][ T1451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1726.948389][ C1] sd 0:0:1:0: tag#4311 CDB: opcode=0xe5 (vendor) [ 1726.954227][ T1451] RIP: 0033:0x7feb56411ae9 [ 1726.954245][ T1451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.954264][ T1451] RSP: 002b:00007feb54188188 EFLAGS: 00000246 [ 1726.960582][ C1] sd 0:0:1:0: tag#4311 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1726.964963][ T1451] ORIG_RAX: 0000000000000127 [ 1726.984599][ C1] sd 0:0:1:0: tag#4311 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 17:00:09 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000000200)={{r1}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:09 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00fbffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1726.990619][ T1451] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1726.990635][ T1451] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1726.999629][ C1] sd 0:0:1:0: tag#4311 CDB[20]: ba [ 1727.004283][ T1451] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.004299][ T1451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.050219][ T1451] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1727.058218][ T1451] 17:00:09 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 9) [ 1727.086619][ T1470] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1727.101607][ T1470] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1727.130257][ T1474] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1727.138922][ C1] sd 0:0:1:0: tag#4327 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1727.148798][ C1] sd 0:0:1:0: tag#4327 CDB: opcode=0xe5 (vendor) [ 1727.155156][ C1] sd 0:0:1:0: tag#4327 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1727.164188][ C1] sd 0:0:1:0: tag#4327 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1727.173264][ C1] sd 0:0:1:0: tag#4327 CDB[20]: ba 17:00:09 executing program 0: unshare(0x40020400) unshare(0x2e010780) unshare(0x0) unshare(0x14040880) unshare(0x100) unshare(0x48000300) [ 1727.185719][ T1560] loop3: detected capacity change from 0 to 1054 [ 1727.220101][ T1560] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1727.230862][ T1560] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1727.237444][ T1560] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1727.250356][ T1560] EXT4-fs (loop3): Remounting filesystem read-only [ 1727.256918][ T1560] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1727.270905][ T1560] EXT4-fs (loop3): Cannot turn on quotas: error -22 17:00:09 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00c0ed000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1727.277585][ T1560] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. 17:00:10 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="5500000018007f33deba2f977333bd930a0200ce01a843089100fe803900080008000000009eb43c6a95a0fb432c00ec0000fb83de44742b4f1e9482218daa72540d8102d20100000000000000926700"/92, 0x5c}], 0x1}, 0xc810) sendmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)="3b2ab4d02fe21925ba2dd580e45140dda4c848cefb6708ab36c532fb244d4908f17b1e95ac8a39662c15883b3f9dbfeb9550ff37ea5ba7ed31a1a5813b998445502364c29b4dca0f1cf6bd2b6effb83508e2c1a199668557efd8dc0c2fd47fea402b354739f36a26a2bf43cbbb1abc9354a80ddc3bd19dcdcd2646761c4bcf8647fc97afaf1a0cd95384ce07a378b7e7a16d5de8de228309ee43e1b126ac53b696673925a8279b4595894bc472cc0b5a828976d92fa8f8c9c376c6f78155d04d63ad2d695f138a0e5156c2dcf03cc5e57a0c6eea565ce46909c86b0c648e3999b5300d9e3f63610b1989c230203b9dbe7a4ce32d4a48fb79025a05766cfbd91c9ca3256e4dc24d3e5cf95f58839c1708a153f76da315fbf0bfe77bcd3e7f113f4b22b78e659b38736c2f5e404bd7c04db0e32ed741029a2cfebe2cb9f7cda23b91ad111d28d94c1bea88301c3e2308de7bd9a64eaeae9fab4e29aeb4b4478fbc15c0e7cc934a48cfc0aa2ff6fb28cdfa49d12d66df39f932ef355025af03036d14e2d27207886450d5773a9a036a10b8511be8de7aaecdbc3ad96c06b88a85f3aa50c30cd7c9925866a03b04bb9b0f2697d8ce0d0519bb7684dd75e3fa6eac47fab33fcc0dcf807f92601e42c797e712739598f56476f250185490cffe4cae0af40b12205cec8cc446625f9dc20fcd83c981aeaf8bc072d05f6dcf70bbc22c43254e2e3b66d0f7043850e534a5f2dec82248ce4428e71a0415ec526772071d5840c58cab90b92f79ac7685f9dbdb33a700deb674bf1593232b15ae501c4bb5f7efd23b7f7adb3362b95afffa92f7498d91ac1d7242f8a92568e904b9cd048c440830aad530c8d45ad923aa9205f52534845d8ee3349bf57f95f3a653434431be766766d9f1199f264878718fc26eee99be131abccdaf7596f17bf8753387af61dcb6de842b45bde9b2f705db0670bf8dd56cf25d725c21823042ac6ad93b854f52cc1f08006f3f5d36c8a831fdb70200ef07907b9daa9c4ea6d8d63a8e971e2e0e0a454710715045d5e75c3348b5334f7751f4f142dff67b082713864915c564ea03a757d727050859ab31423dc61caecc9c275ee45e9abb7aff476789763f42754fb22d58b3f66b5bd8c843a438ec9864afafe307742238411882e9881475e9d70e7df6d72121adadee46ce8cb9093044d3ff86c7765436bcbed06bf66b13e631b61a6b358f37051ec8418856e40c2e97ff9e4eeb2bb8934155f1e812173471573cecf37e6c0e61aef433f12b0492e2a2a53fa7dc8b459ee47431685c65aa7f46cf3143951acb5f1e229736983c662b3a82048d32caf10b1361abba23962dd54dbd3886a7bb2ce12c6038a893a635ce218033ff41faa22e9386ed5834012416e3c179970402fb71c5e073daa49f4f6f4af7e8bff5dd2d8a1f41ee14becda8dda03b5ecbbbd4385c1b432ccf21583c5d3cb910ac70939e8ae5cf8e2cb1e90d16620c69342d65de2c1c98420fff7188b3d70e4517a44b040ebfeba7c7905242e0a377cf0bd09439699ba1b544f856973e6b86be09b74af1801a7d5f0191b8fd2f7f720f6557bf7a8d86a2f3765dd534362efffb43524f944cf27130b48f733d4df323aa2e071aa46409c64fccc446be354f0eb0ab09128f3a765d45503ce1fb81b4dd24b9830feefff8e36fc460a5f33b2c6442733b3e3f334923db643b25806e5be55835550724ca2fbdf3b1af48cbb233dba06c219c3bc2d5d3b47cedc565ab36875a2418e120eaa60516b0c7239ae229fe7e47477998ededbe55a66254002c25297b1404b3c7e082241df5857e5a7e4a9398d028dc56689fc8ae050aa7a88f2a5cc1101caff1d4538e018be3b3eafd1df28806dfcab38404f2d3d1a61d9f97bd1d555588f591d9f61b1fef7cc3a1b932976811ebc60f4290ae27ff5abeba824212dd9530bd524b2b4bbf9cc7ad67c9cca7d1f4c4f17bf58dcd0a7ded9d17aa86e02c54f748baf024bbb4d4ec7b0ca2fca307b2a32a53e67c8cafd7e0392f9643cd0488cd2abf3c28bc2cd10946113f55b464ec30d845abbdc94e6530748c24f246d0780373445dfc8bab32484754186df93343610d9a652020a605c8e4b922ee1fcf1fd830fdeab708c4df807fa80751752f36b05d7f055fd86d721572a2e1b25a41146112d9b70f84f5eee3c8803bae2ab6aedef5beda412ede408cb253a73b82193f8c54be83c9d77042ac4076c9105e5b030bbfde845b41e6358d08c9cebf978a8c08db3c786577cd7770f68dea8ea6dc4a33b67fb01be530ddbd25a141f4906323e623232a86bc7d4957971cf73c52bf4e28ce48371bba787086d5c4cad535dcfe59a21e978dcfdd09ee7551efb8ccf7d1a0fb577adbcc8244272e5caf19cbaed746dd93ee8832d0a72e78789a1d01d6bcd3beabdaba87bebd8a077691b2641abcacaa66cb4db140ac3a64aaba23ee8a22c798c037ce2c3f3ba58694483b18283b5d0572a42b70ec6a4c871a09319fcbd931686a7448fc5801c07b015de5752fb2469f5c77e8ce9cce1808adce46f5ce7c53a04623dbebe930136436db20075f0bb503c0ee9835df8e8957658783dbef3bdbc81793577d545e0712ecad516a8373e42baa858971f1ad5827ebf3cc3dded106a1c82937bb1e2fcc7022b3130abae1fdfa9702d538dab65b17a3ebd58d618b003d8cc3f334c288f100264654fe63dcfe19a39bc51c465b2470d3e2bd5d3cbcc90d27238960a183268e0c0e0c0d2180c631d44e96fabcff08c9e88e4782dc9a9e561f239cb0312b66e8fbbaacfa970679250ad7267924856bf2d043388358dfad279ff399572e2d4a520e319b5043816b8288e5f283012cb6b22890eb43cbcb65b0ecef31da47cda47b1d5dd636289803f1a5933174ce6248d2bb56124a625f8b8b4a1a413734cd42a42da015166dd1f098fe42ae861d3277677da4d5544ac0195068e10e3f3ba773437a54a653fbc76bd9b2ce9c1c5cd4ddb0193d2380a133d16330095df7e4071ffb099d4d0d523fe4df59d8ae2ca902f84cacd1ddcab999d7bcd5d830b3796668afbfde6eeecceee0bfc0559a64776fc867ca36a4af016e9bdc9effdcac52d364ed3e927a47ea459706868c9b56d8117ab3789bb5e958543646e2f033c6d87924a90bdd1faba6c2bdc180a5e01af989c282e0370d6c49bfd5c15d25919eeaaa5b30bca6781482b282ccbe2dc376611ca39b42c6fd9221e37cc3fc63b175c8285a1261415c9a1a12a8f89f7521018276451c163a5fadf2fb57afcb5f1aef325869bf636dba2c060e0af15798cb81e46e31ed5f508f9f393469b0cfcd6eedc1c3b80cafb8bdfd8fa8c68cf59451faa9872f8d4dabf3712c2d2fd64dfacbf41e1c50de0dffb25233e7d32edb19d8fac5fd10cdca4f931c8aa5e02a0334c3975cbd672f28ccd83dd66e9c98ab6e0e104203bdce3643ba5d29a8b6f85217d2efc27e82b4141ba12723e59a45622871ce59aafb4fe00ad05819f0e65f30bd47b986a5829c668ca570cb564fcd48b7280d7c3491c795e06a8036a7ff4a8474daa3a2ea89e8c83436704847d9795d2342d8fa0e1a2e137a04b5d04bbfa9ef488e64fa87aab0aa4fd41f12e7155111925e6d74d0f243a1a9c43834b868c71c3c25532ce85e40d7c335f7b46c216286f1d83e759e4b3a039cf0130bb435aae5f0eff9ae2fc1401efaa0d320a5b7f195c250701a7875e09d9bfb88c9f459b37b266f99c84e034dea24e21c0a301ed4697f6f995766ef0b351f4915b2be721d491c500cc708a13d6ee06500ed7a3dde6db1bae0c9d425e4d4fd2023feefbf0579b9ad49b8b5463822dd96b625958168c6ef342fc4a02f9cf1379c425bf549ca4fbf2055d679a604ed2e172298fdd03f37dee9f1bc7ff12e6e44565f0aa31325a6796aa274e5e350a604ce376f1666c09f1fd851136b52541f6de437dfe32477783acf94ab5efc59c18dc1eefa685245368a9f6775743b234b60392c74492ef741445937e7987afd20c0546afbf27ae96dfd561fdcef6b3f78e42f7fb7892d7e88188fc3e8d1cf08e07bb072c58d80f4d8a867501651ca03071c8cc1b79d68b35546371998748bd722f935169b71edf8299d28f10f0d6a19884ad1d41762dfea34846ea1f2c1265279f04c4f23bcb0cab5159d357af9f5008efe7f9f34572a0cabdb9f7ca482e0d59d91fbb0cbc57cb499cbb457d1e74294e4164fc2e3556bcf6392e4524c147f3d9ba48acf2a2e2324e427bae552e7477053804aa1c87828d374fb7646ae24ae19fb47822ccea63bbe93b589ada532b31a946161f8df250fb9d8720f9ad0951f6770c195071d792986a0ea08293fa6aedd6392e6dadee1c782027e44250cf811a2aff1d10582c31776ae6a52d66b785f10dd8b418b11fb3cff5d48a1f90a66d83374ae5577c690038ba1caf089d203ffe282e53181be84376f3c670d61d8c1017553db3b9fa9ccef7a46b4b4abe98ab82c81e6326ace03390a344ef054da6e4e42ddbe42854038c465dc0cc2e4403dfb29ee69035803596795baa50f4c643c3914fb2ed1a044eb49bfcefc4bb9f519627e70991ac4a42479f7da08647ca5d4342db8c63259f2022ad54ed22c3bb83b20b45ce4b93c8e9c4c6d41353381eef424b550b980381c055695852fdc401ad30882171b6a811c8dacb57740ff4162eb6ad6f72a17878d618ed5a80ca1d33a0031109f0c04f1fc67447846c03fdfa3e5ab9b0c7bb57ed8ae21ff61eb6f01a4fe267fe60550dba896e8beef190cc7bc4fc90614acc2b1a278bcdc1f359ab4645cbbf7a158e6355beb087cc5715f9be8ce5cc16f44d32ce910ca6dfadbce83d513e44dd68c08afe9d7c330bea0eb9c436488d9edd5512d5c49eca7088b6dcd4445adc6260c3df90f6eb74c7d6cd0abb50f46dca59fdbc9e5834d3f3e22f6259d2f40413088f0883dac9f9e060515e42e80f18477a6afb536921ca29502fa738a10eebc78899b4abcd2ec5e59bd741efcdf8e99a4a934ddf93e670182de6aae7be3f5b2b3d059b5904612027124ab80c2fba8a61313cc3546984145802c98d028a5804eec47edfbdcf930f2688c5eede8ba3dccb529dc2e20208c299f01a692c6ea56ff1c561d7df7018195fbd7311d25531721c668321e82e3547c7378c6b1f96f695d6776a5a2d6b131954f2ed06a4983c32bb9376004ae8472a866ce9a9e4296abc053561eb10db192cceb3f00db7be6b5933fa7918b73014e729b11765614a37466642f61632999484aefa98478331c7922757c84048912fa58166df6a2afb4f1c8c1d620994e1df389a64b83cee69fa5931c6b279a552d26e653bbb1fe6fe6ad726ba9107eb9709c51f18657d5e1d852cb7aba0edc838037c86b1ca1b55cf8097c03a801373760d421a7912acfeab5f7f0e185719da1d906e0febddea19a2479193f2ed8705ac0901c4ee4a83da45dd238151ea0e0fd06ce7fc594c81729086e9ab16e666acb6c8dcd5ed2839487eba0a7b99d8f39824e9606c4d7174cf12ed52f3d31e94eac2e99ccbc73ba299d644661887ffd32036587daa2f0010b6a7a946238bd285d6bf3fcb868a6ad3d84ee32b73b08d4f7602eb1f3b85b40a5d9a1669c998f823a215bbf3d8ba7d932a6dea9891327e003dbe5766880895de8d4ee141b7b5bb1dfef918ebfc97509de710b76610c94030aaa188bee6475ce59e2caec7b20251a1172185de5863e57f463f8c09b48bdd76dc8a517a5dc5f539b1a8f9e78d8b8b31d4a3accb5353bc856c4a2d4ae1cdf", 0x1000}, {&(0x7f0000001140)="84a012449db7c8fe2af62778d20eaf4a41780ce613a20c228ba9f0bfefe30e037763251f4858324d921a4ac1b0685db2ea64273d3ab2c5f7b7a21343e54c5fa9326e10acc880fe777c9d547812531f7f9450082b7058d94799d4e942096630e7ed7319f85443e2ce1db232a8757ad92b3457ef6701dee9c5a847498c14ec487ef81c9bba0e387428daed4e0e5886ccf8e2c4accbea7865f8f0c22d05cbae041e75d833b65258d2a20f3c11ffb8c9b7b50d7bc59650f4a76c981acd", 0xbb}, {&(0x7f0000001200)="5f646139f48e64144c751ccbcab72b4610bb3de4772d65504940985e2b22b2b08d12c08bf9f7fd956b97d85e25caa920000611f0064e61d787b894b213f45cbc3c304493e3232bdd770bb66b95853c78bf04af0e475ec76b9d67a3bd1392a06c", 0x60}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x20008800) [ 1727.611123][ T1579] FAULT_INJECTION: forcing a failure. [ 1727.611123][ T1579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.624400][ T1579] CPU: 0 PID: 1579 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1727.634126][ T1579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1727.644179][ T1579] Call Trace: [ 1727.647450][ T1579] [ 1727.650473][ T1579] dump_stack_lvl+0xd6/0x122 [ 1727.655065][ T1579] dump_stack+0x11/0x1b [ 1727.659264][ T1579] should_fail+0x23c/0x250 [ 1727.663811][ T1579] should_fail_usercopy+0x16/0x20 [ 1727.668846][ T1579] _copy_to_user+0x1c/0x90 [ 1727.673262][ T1579] rng_dev_read+0x2bd/0x630 [ 1727.677772][ T1579] do_iter_read+0x370/0x5d0 [ 1727.682341][ T1579] do_preadv+0x159/0x240 [ 1727.686636][ T1579] __x64_sys_preadv+0x54/0x60 [ 1727.691349][ T1579] do_syscall_64+0x44/0xa0 [ 1727.695777][ T1579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1727.701705][ T1579] RIP: 0033:0x7feb56411ae9 [ 1727.706116][ T1579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.725755][ T1579] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1727.734186][ T1579] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1727.742156][ T1579] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1727.750130][ T1579] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:10 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 10) [ 1727.758110][ T1579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.766255][ T1579] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1727.774232][ T1579] [ 1727.801192][ T1681] loop4: detected capacity change from 0 to 1054 17:00:10 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1727.844871][ T1681] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1727.876062][ T1698] loop3: detected capacity change from 0 to 1054 [ 1727.883145][ T1699] IPv6: Can't replace route, no match found 17:00:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000280)=ANY=[], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0xf0884e62cdcde8e6}, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) write(r3, &(0x7f0000000100)="3c196836a3a300b47c9c51bbe0cc762bd38d81e9936fae18e3e7a4c4fd6bc5805207dfcf2d7da2d8325b3553f8f9741523f13f1418afd63fbf50257531b2c1aabb56e8d5d20642eca5e8fd41493c83be7ee6bca5c7ccbe0b0f2f1db322c479dcf9f408e80f3457797a3d7432ba66352658914c8170fe78329b9239a2ba2a76f7b70a7c1de020cffb6835a694d1557afd9949673ac31c716bdadac7d9d29af8cf75524f7d6bf8a12ba58cf96e15fb8322", 0xb0) [ 1727.893830][ T1705] loop4: detected capacity change from 0 to 1054 [ 1727.901432][ T1699] IPv6: Can't replace route, no match found [ 1727.908142][ T1705] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1727.923211][ T1698] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1727.934509][ T1698] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1727.941015][ T1698] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1727.953584][ T1698] EXT4-fs (loop3): Remounting filesystem read-only [ 1727.960145][ T1698] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1727.974231][ T1698] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1727.980910][ T1698] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1728.055275][ T1817] FAULT_INJECTION: forcing a failure. [ 1728.055275][ T1817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.068501][ T1817] CPU: 1 PID: 1817 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1728.078217][ T1817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.088399][ T1817] Call Trace: [ 1728.091677][ T1817] [ 1728.094687][ T1817] dump_stack_lvl+0xd6/0x122 [ 1728.099283][ T1817] dump_stack+0x11/0x1b [ 1728.103518][ T1817] should_fail+0x23c/0x250 [ 1728.107938][ T1817] should_fail_usercopy+0x16/0x20 [ 1728.113021][ T1817] _copy_to_user+0x1c/0x90 [ 1728.117441][ T1817] rng_dev_read+0x2bd/0x630 [ 1728.121958][ T1817] do_iter_read+0x370/0x5d0 [ 1728.126464][ T1817] do_preadv+0x159/0x240 [ 1728.130722][ T1817] __x64_sys_preadv+0x54/0x60 [ 1728.135473][ T1817] do_syscall_64+0x44/0xa0 [ 1728.139978][ T1817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1728.145880][ T1817] RIP: 0033:0x7feb56411ae9 [ 1728.150381][ T1817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.170127][ T1817] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1728.178552][ T1817] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1728.186625][ T1817] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1728.194633][ T1817] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:10 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00feffffff00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:10 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="5500000018007f33deba2f977333bd930a0200ce01a843089100fe803900080008000000009eb43c6a95a0fb432c00ec0000fb83de44742b4f1e9482218daa72540d8102d20100000000000000926700"/92, 0x5c}], 0x1}, 0xc810) sendmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="84a012449db7c8fe2af62778d20eaf4a41780ce613a20c228ba9f0bfefe30e037763251f4858324d921a4ac1b0685db2ea64273d3ab2c5f7b7a21343e54c5fa9326e10acc880fe777c9d547812531f7f9450082b7058d94799d4e942096630e7ed7319f85443e2ce1db232a8757ad92b3457ef6701dee9c5a847498c14ec487ef81c9bba0e387428daed4e0e5886ccf8e2c4accbea7865f8f0c22d05cbae041e75d833b65258d2a20f3c11ffb8c9b7b50d7bc59650f4a76c981acd", 0xbb}, {&(0x7f0000001200)="5f646139f48e64144c751ccbcab72b4610bb3de4772d65504940985e2b22b2b08d12c08bf9f7fd956b97d85e25caa920000611f0064e61d787b894b213f45cbc3c304493e3232bdd770bb66b95853c78bf04af0e475ec76b9d67a3bd1392a06c", 0x60}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x20008800) 17:00:10 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000fff000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:10 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 11) [ 1728.202648][ T1817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.210616][ T1817] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1728.218608][ T1817] 17:00:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x5, 0x44) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009cb0abd3f20a05640ca5891dac6e3339bf12de34e39d29da863c0fbf2f0b18ce87399b452f7d6225928be672d9a9e95d71ee03000000f0b5095d329e5423621a26a64b0936265332b127a8f4aee332d741f994b0699f5d19072bd9c3c6d9385ea297ecbbf3ebbf9557124274f83cfffb91296d9ec0c547797b28638ce3269a10f2277e9d11b12f6fb69b621fe711ddb3ebe333d88e39df5174acc51efd0381ad55475285a49ef2bffc23953bd4f39ff9480acb0db20b8781bf885718c05e2701326c500427fefbc82b5831764558a8d23e7d3f6859efbf4f7312205b495cf7e37bcf893266dd9bf588f0eb1cea"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) dup(r1) [ 1728.370477][ T1820] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1728.381665][ T1825] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:00:11 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="5500000018007f33deba2f977333bd930a0200ce01a843089100fe803900080008000000009eb43c6a95a0fb432c00ec0000fb83de44742b4f1e9482218daa72540d8102d20100000000000000926700"/92, 0x5c}], 0x1}, 0xc810) sendmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="84a012449db7c8fe2af62778d20eaf4a41780ce613a20c228ba9f0bfefe30e037763251f4858324d921a4ac1b0685db2ea64273d3ab2c5f7b7a21343e54c5fa9326e10acc880fe777c9d547812531f7f9450082b7058d94799d4e942096630e7ed7319f85443e2ce1db232a8757ad92b3457ef6701dee9c5a847498c14ec487ef81c9bba0e387428daed4e0e5886ccf8e2c4accbea7865f8f0c22d05cbae041e75d833b65258d2a20f3c11ffb8c9b7b50d7bc59650f4a76c981acd", 0xbb}, {&(0x7f0000001200)="5f646139f48e64144c751ccbcab72b4610bb3de4772d65504940985e2b22b2b08d12c08bf9f7fd956b97d85e25caa920000611f0064e61d787b894b213f45cbc3c304493e3232bdd770bb66b95853c78bf04af0e475ec76b9d67a3bd1392a06c", 0x60}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x20008800) [ 1728.440206][ T1831] IPv6: Can't replace route, no match found [ 1728.466018][ T1832] FAULT_INJECTION: forcing a failure. [ 1728.466018][ T1832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.479361][ T1832] CPU: 0 PID: 1832 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1728.489237][ T1832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.499298][ T1832] Call Trace: [ 1728.502568][ T1832] [ 1728.505507][ T1832] dump_stack_lvl+0xd6/0x122 [ 1728.510101][ T1832] dump_stack+0x11/0x1b [ 1728.514262][ T1832] should_fail+0x23c/0x250 [ 1728.518678][ T1832] should_fail_usercopy+0x16/0x20 [ 1728.523764][ T1832] _copy_to_user+0x1c/0x90 [ 1728.528291][ T1832] rng_dev_read+0x2bd/0x630 [ 1728.532837][ T1832] do_iter_read+0x370/0x5d0 [ 1728.537450][ T1832] do_preadv+0x159/0x240 [ 1728.541698][ T1832] __x64_sys_preadv+0x54/0x60 [ 1728.546414][ T1832] do_syscall_64+0x44/0xa0 [ 1728.550846][ T1832] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1728.556744][ T1832] RIP: 0033:0x7feb56411ae9 [ 1728.561205][ T1832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1728.580814][ T1832] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 17:00:11 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 12) [ 1728.589282][ T1832] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1728.597252][ T1832] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1728.605273][ T1832] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1728.613244][ T1832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.621214][ T1832] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1728.629193][ T1832] [ 1728.634233][ T1933] loop4: detected capacity change from 0 to 1054 17:00:11 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1728.671978][ T1933] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) [ 1728.673320][ T1938] loop3: detected capacity change from 0 to 1054 [ 1728.712078][ T1938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60935!=0) [ 1728.723930][ T1938] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1728.730418][ T1938] EXT4-fs error (device loop3): ext4_free_inode:282: comm syz-executor.3: reserved or nonexistent inode 3 [ 1728.742445][ T1938] EXT4-fs (loop3): Remounting filesystem read-only [ 1728.748994][ T1938] EXT4-fs warning (device loop3): ext4_enable_quotas:6354: Failed to enable quota tracking (type=0, err=-22). Please run e2fsck to fix. [ 1728.762916][ T1938] EXT4-fs (loop3): Cannot turn on quotas: error -22 17:00:11 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000020000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1728.769499][ T1938] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 1728.784808][ T1945] loop4: detected capacity change from 0 to 1054 [ 1728.796869][ T1945] EXT4-fs (loop4): bad geometry: first data block 65535 is beyond end of filesystem (512) 17:00:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = socket(0xb, 0x802, 0x5) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000000b0108000000000000010007000008080001005c402d2f00034000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4800) setuid(r3) setreuid(r3, r3) ioctl$TIOCVHANGUP(r0, 0x4b68, 0x3) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x2, 'virt_wifi0\x00', {0x838}, 0xff}) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r5, r1, &(0x7f0000000180)=0x401, 0x1) 17:00:11 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="5500000018007f33deba2f977333bd930a0200ce01a843089100fe803900080008000000009eb43c6a95a0fb432c00ec0000fb83de44742b4f1e9482218daa72540d8102d20100000000000000926700"/92, 0x5c}], 0x1}, 0xc810) sendmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000001280)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="84a012449db7c8fe2af62778d20eaf4a41780ce613a20c228ba9f0bfefe30e037763251f4858324d921a4ac1b0685db2ea64273d3ab2c5f7b7a21343e54c5fa9326e10acc880fe777c9d547812531f7f9450082b7058d94799d4e942096630e7ed7319f85443e2ce1db232a8757ad92b3457ef6701dee9c5a847498c14ec487ef81c9bba0e387428daed4e0e5886ccf8e2c4accbea7865f8f0c22d05cbae041e75d833b65258d2a20f3c11ffb8c9b7b50d7bc59650f4a76c981acd", 0xbb}, {&(0x7f0000001200)="5f646139f48e64144c751ccbcab72b4610bb3de4772d65504940985e2b22b2b08d12c08bf9f7fd956b97d85e25caa920000611f0064e61d787b894b213f45cbc3c304493e3232bdd770bb66b95853c78bf04af0e475ec76b9d67a3bd1392a06c", 0x60}], 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x20008800) 17:00:11 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000000000ea020000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1728.842199][ T1954] 9pnet: p9_errstr2errno: server reported unknown error œ°«Óò [ 1728.842199][ T1954] d ¥‰¬n39¿Þ4ã)Ú†<¿/ ·9›E/}b%’‹ærÙ©é]qî [ 1728.871106][ T1957] IPv6: Can't replace route, no match found [ 1728.936524][ T1962] FAULT_INJECTION: forcing a failure. [ 1728.936524][ T1962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.950040][ T1962] CPU: 0 PID: 1962 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1728.959834][ T1962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.969909][ T1962] Call Trace: [ 1728.973211][ T1962] [ 1728.976135][ T1962] dump_stack_lvl+0xd6/0x122 [ 1728.980983][ T1962] dump_stack+0x11/0x1b [ 1728.985332][ T1962] should_fail+0x23c/0x250 [ 1728.989756][ T1962] should_fail_usercopy+0x16/0x20 [ 1728.994786][ T1962] _copy_to_user+0x1c/0x90 [ 1728.999315][ T1962] rng_dev_read+0x2bd/0x630 [ 1729.003823][ T1962] do_iter_read+0x370/0x5d0 [ 1729.008490][ T1962] do_preadv+0x159/0x240 [ 1729.013058][ T1962] __x64_sys_preadv+0x54/0x60 [ 1729.017739][ T1962] do_syscall_64+0x44/0xa0 [ 1729.022265][ T1962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1729.028186][ T1962] RIP: 0033:0x7feb56411ae9 [ 1729.032660][ T1962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.052264][ T1962] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1729.060688][ T1962] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1729.068745][ T1962] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1729.076755][ T1962] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.084733][ T1962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.092768][ T1962] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1729.100751][ T1962] 17:00:11 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 13) 17:00:11 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1729.132820][ T1972] IPv6: Can't replace route, no match found [ 1729.150390][ T1978] loop4: detected capacity change from 0 to 1054 [ 1729.165503][ C0] sd 0:0:1:0: tag#4351 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 17:00:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]}) io_setup(0x81, &(0x7f0000000040)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) io_submit(r0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) io_getevents(r0, 0x80000000, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)={0x0, 0x989680}) [ 1729.170607][ T1978] EXT4-fs (loop4): bad geometry: first data block 48889856 is beyond end of filesystem (512) [ 1729.175355][ C0] sd 0:0:1:0: tag#4351 CDB: opcode=0xe5 (vendor) [ 1729.191809][ C0] sd 0:0:1:0: tag#4351 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1729.200848][ C0] sd 0:0:1:0: tag#4351 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1729.209881][ C0] sd 0:0:1:0: tag#4351 CDB[20]: ba 17:00:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x2, 0xfe}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 1729.236664][ C0] sd 0:0:1:0: tag#4309 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1729.246514][ C0] sd 0:0:1:0: tag#4309 CDB: opcode=0xe5 (vendor) [ 1729.252869][ C0] sd 0:0:1:0: tag#4309 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1729.261907][ C0] sd 0:0:1:0: tag#4309 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1729.270936][ C0] sd 0:0:1:0: tag#4309 CDB[20]: ba [ 1729.295653][ T1988] loop4: detected capacity change from 0 to 1054 [ 1729.307975][ T1988] EXT4-fs (loop4): bad geometry: first data block 48889856 is beyond end of filesystem (512) [ 1729.324766][ T1993] loop3: detected capacity change from 0 to 1054 17:00:12 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000000000c0ed0000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1729.354271][ T1993] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1729.364499][ T1993] EXT4-fs (loop3): group descriptors corrupted! [ 1729.371676][ T1998] FAULT_INJECTION: forcing a failure. [ 1729.371676][ T1998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.385140][ T1998] CPU: 1 PID: 1998 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1729.394942][ T1998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.405063][ T1998] Call Trace: [ 1729.408336][ T1998] [ 1729.411258][ T1998] dump_stack_lvl+0xd6/0x122 [ 1729.415846][ T1998] dump_stack+0x11/0x1b [ 1729.420056][ T1998] should_fail+0x23c/0x250 [ 1729.424551][ T1998] should_fail_usercopy+0x16/0x20 [ 1729.429582][ T1998] _copy_to_user+0x1c/0x90 [ 1729.433991][ T1998] rng_dev_read+0x2bd/0x630 [ 1729.438551][ T1998] do_iter_read+0x370/0x5d0 [ 1729.443118][ T1998] do_preadv+0x159/0x240 [ 1729.447364][ T1998] __x64_sys_preadv+0x54/0x60 [ 1729.452035][ T1998] do_syscall_64+0x44/0xa0 [ 1729.456452][ T1998] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1729.462389][ T1998] RIP: 0033:0x7feb56411ae9 [ 1729.466800][ T1998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.486590][ T1998] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1729.495125][ T1998] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1729.503226][ T1998] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1729.511269][ T1998] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.519234][ T1998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.527232][ T1998] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1729.535200][ T1998] 17:00:12 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 14) [ 1729.564652][ T2105] loop3: detected capacity change from 0 to 1054 [ 1729.577375][ T2105] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1729.587699][ T2105] EXT4-fs (loop3): group descriptors corrupted! 17:00:12 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:12 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffff030000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:12 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x66ef, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee6000/0x3000)=nil, 0x3000, 0x1, 0x110, r4, 0x8000000) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xa}, 0x10001) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x111180, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r9}, 0x4) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 17:00:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x1, 0x49, 0x0, 0xa, 0x0, 0x0, 0x40000000000000, 0x2}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r1, &(0x7f00000002c0)=""/177, 0xb1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x101}]}) setrlimit(0x1, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x4d) tkill(r3, 0x3a) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) pidfd_open(r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r1, &(0x7f0000000440)=0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={0x0, 0x9, 0x401}) [ 1729.823940][ T2218] loop4: detected capacity change from 0 to 1054 [ 1729.849485][ T2218] EXT4-fs (loop4): bad geometry: first data block 3988783104 is beyond end of filesystem (512) [ 1729.860442][ T2219] FAULT_INJECTION: forcing a failure. [ 1729.860442][ T2219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.873809][ T2219] CPU: 0 PID: 2219 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1729.883525][ T2219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.893578][ T2219] Call Trace: [ 1729.896856][ T2219] [ 1729.899781][ T2219] dump_stack_lvl+0xd6/0x122 [ 1729.904367][ T2219] dump_stack+0x11/0x1b [ 1729.908525][ T2219] should_fail+0x23c/0x250 [ 1729.913055][ T2219] should_fail_usercopy+0x16/0x20 [ 1729.913481][ T2229] loop3: detected capacity change from 0 to 1054 [ 1729.918243][ T2219] _copy_to_user+0x1c/0x90 [ 1729.928945][ T2219] rng_dev_read+0x2bd/0x630 [ 1729.933462][ T2219] do_iter_read+0x370/0x5d0 [ 1729.937964][ T2219] do_preadv+0x159/0x240 [ 1729.942208][ T2219] __x64_sys_preadv+0x54/0x60 [ 1729.942737][ T2229] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1729.946882][ T2219] do_syscall_64+0x44/0xa0 [ 1729.946913][ T2219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1729.957107][ T2229] EXT4-fs (loop3): group descriptors corrupted! 17:00:12 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="74722690c2d3f2312fc1d651616e73", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x100010, r2, 0xe2d9c000) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000100)='./file0\x00', 0x103201, 0x61) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x1000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@afid={'afid', 0x3d, 0x800}}], [{@subj_type={'subj_type', 0x3d, '^'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ').(@#\\!*$,.'}}, {@fowner_gt={'fowner>', r6}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\'*L\n@:.'}}, {@fowner_lt={'fowner<', 0xee01}}, {@euid_lt={'euid<', 0xee00}}]}}) [ 1729.961449][ T2219] RIP: 0033:0x7feb56411ae9 [ 1729.961491][ T2219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.997662][ T2219] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1730.006090][ T2219] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1730.014114][ T2219] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 17:00:12 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:12 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 15) [ 1730.022112][ T2219] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.030182][ T2219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.038219][ T2219] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1730.046200][ T2219] [ 1730.062511][ T2435] loop4: detected capacity change from 0 to 1054 [ 1730.070924][ T2435] EXT4-fs (loop4): bad geometry: first data block 3988783104 is beyond end of filesystem (512) [ 1730.086130][ T2444] loop3: detected capacity change from 0 to 1054 [ 1730.093792][ T2444] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1730.104109][ T2444] EXT4-fs (loop3): group descriptors corrupted! 17:00:12 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:12 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000300)=""/193, 0xc1}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/200, 0xc8}], 0x7, &(0x7f00000007c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/48, 0x30}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000000b80)=""/33, 0x21}], 0x4}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/82, 0x52}], 0x1, &(0x7f0000000d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x80}, 0x5e003, 0x5, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb4000, 0x0, 0xffffffffffffffff}, r0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xfa, 0xca, 0x8, 0x8, 0x0, 0x5, 0x24002, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x7, 0x1f, 0x4, 0x0, 0x6, 0x7ff, 0x0, 0x200, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) 17:00:12 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000040000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1730.139809][ T23] audit: type=1400 audit(1636131612.792:2467): avc: denied { execute } for pid=2433 comm="syz-executor.5" path="pipe:[341770]" dev="pipefs" ino=341770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 17:00:12 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x0, 0x4, @loopback, 0xfffffffe}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000240)) r3 = dup2(r1, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r6, &(0x7f0000000080)='net/softnet_stat\x00') ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x1000000000000b) splice(r1, 0x0, r0, 0x0, 0x406f40a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1796], 0x704) r7 = geteuid() fchown(r1, r7, 0xee00) [ 1730.272855][ T2562] FAULT_INJECTION: forcing a failure. [ 1730.272855][ T2562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.286202][ T2562] CPU: 0 PID: 2562 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1730.295974][ T2562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.306125][ T2562] Call Trace: [ 1730.309395][ T2562] [ 1730.312328][ T2562] dump_stack_lvl+0xd6/0x122 [ 1730.316915][ T2562] dump_stack+0x11/0x1b [ 1730.321067][ T2562] should_fail+0x23c/0x250 [ 1730.325500][ T2562] should_fail_usercopy+0x16/0x20 [ 1730.330604][ T2562] _copy_to_user+0x1c/0x90 [ 1730.335023][ T2562] rng_dev_read+0x2bd/0x630 [ 1730.339536][ T2562] do_iter_read+0x370/0x5d0 [ 1730.344142][ T2562] do_preadv+0x159/0x240 [ 1730.348390][ T2562] __x64_sys_preadv+0x54/0x60 [ 1730.353076][ T2562] do_syscall_64+0x44/0xa0 [ 1730.357517][ T2562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1730.363435][ T2562] RIP: 0033:0x7feb56411ae9 [ 1730.367856][ T2562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1730.387501][ T2562] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1730.395978][ T2562] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1730.404048][ T2562] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1730.412028][ T2562] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:13 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 16) [ 1730.419998][ T2562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1730.428009][ T2562] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1730.435984][ T2562] 17:00:13 executing program 0: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e20}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='uni\x00'/13]) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file2\x00', 0x40e400, 0x102) getdents(r1, &(0x7f0000000200)=""/52, 0x34) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc) [ 1730.501894][ T2571] loop4: detected capacity change from 0 to 1054 [ 1730.513396][ T2580] loop3: detected capacity change from 0 to 1054 [ 1730.532161][ T2571] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 1730.542051][ T2580] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1730.552247][ T2580] EXT4-fs (loop3): group descriptors corrupted! [ 1730.585155][ T2626] loop3: detected capacity change from 0 to 1054 [ 1730.602279][ T2626] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1730.612509][ T2626] EXT4-fs (loop3): group descriptors corrupted! [ 1730.622172][ T2666] loop4: detected capacity change from 0 to 1054 [ 1730.631062][ T2666] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 1730.647219][ T2698] FAULT_INJECTION: forcing a failure. [ 1730.647219][ T2698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.660514][ T2698] CPU: 1 PID: 2698 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1730.670233][ T2698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1730.680378][ T2698] Call Trace: [ 1730.683655][ T2698] [ 1730.686578][ T2698] dump_stack_lvl+0xd6/0x122 [ 1730.691168][ T2698] dump_stack+0x11/0x1b [ 1730.695316][ T2698] should_fail+0x23c/0x250 [ 1730.699753][ T2698] should_fail_usercopy+0x16/0x20 [ 1730.704859][ T2698] _copy_to_user+0x1c/0x90 [ 1730.709267][ T2698] rng_dev_read+0x2bd/0x630 [ 1730.713777][ T2698] do_iter_read+0x370/0x5d0 [ 1730.718277][ T2698] do_preadv+0x159/0x240 [ 1730.722552][ T2698] __x64_sys_preadv+0x54/0x60 [ 1730.727318][ T2698] do_syscall_64+0x44/0xa0 [ 1730.731738][ T2698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1730.737651][ T2698] RIP: 0033:0x7feb56411ae9 [ 1730.742114][ T2698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1730.761810][ T2698] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1730.770226][ T2698] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1730.778193][ T2698] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1730.786242][ T2698] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1730.794226][ T2698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:00:13 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffff1f0000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:13 executing program 5: socket$inet6(0xa, 0x3, 0x3c) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x491389551ea2836f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000080)) set_mempolicy(0x3, &(0x7f0000000180)=0x3, 0x3ff) r2 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a202, 0x0) ioctl$sock_ifreq(r3, 0x89b0, &(0x7f00000001c0)={'caif0\x00', @ifru_addrs=@sco={0x1f, @fixed}}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000240)=0x1000, 0x1ff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x21, 0x47, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e196d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0xfffd, 0x7fc, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x403) signalfd4(r0, &(0x7f0000000140)={[0x10001]}, 0x8, 0x0) 17:00:13 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1730.802186][ T2698] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1730.810159][ T2698] 17:00:13 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 17) 17:00:13 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:13 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@rand_addr=0x64010100, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_msfilter(r2, 0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="5637360939eb98dc038775ff0000000000080024fe0078d75d299231b162a2a2636c54a260e84f1b37f7331b78450f289fe884021a575ea00593534a95dfcd"], 0x10) [ 1731.061489][ C1] sd 0:0:1:0: tag#4340 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1731.071349][ C1] sd 0:0:1:0: tag#4340 CDB: opcode=0xe5 (vendor) [ 1731.077688][ C1] sd 0:0:1:0: tag#4340 CDB[00]: e5 f4 32 73 2f 4e 19 6d 26 e2 c7 35 d1 35 12 1c [ 1731.086751][ C1] sd 0:0:1:0: tag#4340 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1731.095809][ C1] sd 0:0:1:0: tag#4340 CDB[20]: ba 17:00:13 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) creat(0x0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x21f6, 0x0, 0x6, &(0x7f0000000140)={[0x3]}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="100008005822875340eb4c0bce472b13c36b20a45e75fb56ef24b979b8c1a9045cbb3d2241c2893be152f5c30a7324dae0076b5a88b072ed8b368fbb894bf2b5584fd3066b5aaa89be01", @ANYRES16=0x0, @ANYBLOB="000000000000000c5d203a425bba094dc34e9fca0000001000000015000300", @ANYRES32=0x0], 0x28}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r4, 0x1c8}], 0x1, &(0x7f00000000c0)={r5, r6+60000000}, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000180), 0xfff, 0x200) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000001c0)={0x16, 0x3, 0x7, "88ad208c04c0a31477b93cf149f382ee9705b2dc96db"}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000440)="1f354bc9dd0b41e3d9ccbf051d908951b6c9544f63033aaf6fb0eb2d62ab913269cafdf18ddf6705a9eb01473767a86dbdaeaa37b123c3a03812ffc179b32b64009004fd7e6f0ff49997987f8e976cd5e01d54825fff2f2e49a0975848665edc", 0x60}, {&(0x7f00000004c0)="658b9e26af8289f7fa7c98ffbb3b5af3229c95f2409a563c7de8a3f06843c148ebc53f4c7c6b612b0ff948782699062b13d17fe6f3db52bafa1a19f460f998eff6698ab6a70cd5eaf5b2a5ed7ce21ac481633af9017609a34a4e6ec8283259ad1a0cc16b54492a087e9525aaa87e79664ab8e8389f603661500556f2257aaab4eda12d22c214f76366744709210ab56a1e0214a318cdc63f0bb727106ccf0429e0c7f8953f42ccf2a75393661d6bddd149a1bed5777084c3388ba66ea9d2318a3713b4aa31a6cab9841a0c9d9a3b71", 0xcf}, {&(0x7f00000002c0)="b6db3b0ce36c33bd16be2e7d791ec4fd46e7dc7cd89738421f835cf960c415064364278f2550f94a2b9d4442e26345f70811fbc7e6e55ad16f1e9c", 0x3b}], 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x80000001) [ 1731.140589][ T2817] loop3: detected capacity change from 0 to 1054 [ 1731.140584][ T2738] FAULT_INJECTION: forcing a failure. [ 1731.140584][ T2738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.140628][ T2738] CPU: 0 PID: 2738 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1731.140650][ T2738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.179713][ T2738] Call Trace: [ 1731.182983][ T2738] [ 1731.185909][ T2738] dump_stack_lvl+0xd6/0x122 [ 1731.190586][ T2738] dump_stack+0x11/0x1b [ 1731.194735][ T2738] should_fail+0x23c/0x250 [ 1731.199302][ T2738] should_fail_usercopy+0x16/0x20 [ 1731.204328][ T2738] _copy_to_user+0x1c/0x90 [ 1731.208742][ T2738] rng_dev_read+0x2bd/0x630 [ 1731.213258][ T2738] do_iter_read+0x370/0x5d0 [ 1731.217851][ T2738] do_preadv+0x159/0x240 [ 1731.222224][ T2738] __x64_sys_preadv+0x54/0x60 [ 1731.226902][ T2738] do_syscall_64+0x44/0xa0 [ 1731.231348][ T2738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1731.237248][ T2738] RIP: 0033:0x7feb56411ae9 [ 1731.241654][ T2738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.261259][ T2738] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1731.270020][ T2738] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1731.277987][ T2738] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1731.285954][ T2738] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1731.294002][ T2738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.301969][ T2738] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1731.309944][ T2738] [ 1731.323844][ T2821] loop4: detected capacity change from 0 to 1054 17:00:14 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 18) [ 1731.337328][ T2817] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1731.347602][ T2817] EXT4-fs (loop3): group descriptors corrupted! [ 1731.359309][ T2821] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 1731.382669][ T2828] loop3: detected capacity change from 0 to 1054 17:00:14 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72656c61746976653a2c005008c49dd461418873160b71225678c2675b4e6c87afc5b64cfdf991a70aa490802e1af1f7523ee9c218d74e66795dc48e98c74d323f7fb9675d64e297387e1bffa5cf488637712635a61125586ceb35207d8b7cca1f5860c83f13a80c6241e4bbc5ad84de7bfaa7d4145ef17fc7d1b8f56492a24886a9289fba492b90d5d151f1a92e98bf3badcab767d67dece56bfdf36c"]) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r3) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write(r4, &(0x7f0000000240)="2f0c8748239ce832", 0x8) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="687567653d6164766973652c6d706f6c3d64656661756c743a30362c6d706f6c3d6c6f63616c3d7374617469632c7569643d9d276c3d8f6c44b9ed8639f9e49704154d0f5472e3e32c348553bfdccfb19eaad2", @ANYRESDEC=r1, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=r3, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) mknod$loop(&(0x7f0000000280)='./file0\x00', 0xc000, 0x0) [ 1731.383576][ T2830] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1731.399223][ T2834] loop4: detected capacity change from 0 to 1054 [ 1731.406125][ T2828] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1731.407943][ T2830] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1731.416349][ T2828] EXT4-fs (loop3): group descriptors corrupted! [ 1731.431759][ T2834] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent 17:00:14 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000400000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:14 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000400000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1731.520767][ C0] sd 0:0:1:0: tag#4297 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1731.530632][ C0] sd 0:0:1:0: tag#4297 CDB: opcode=0xe5 (vendor) [ 1731.536977][ C0] sd 0:0:1:0: tag#4297 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1731.546009][ C0] sd 0:0:1:0: tag#4297 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1731.555038][ C0] sd 0:0:1:0: tag#4297 CDB[20]: ba [ 1731.599911][ T2850] FAULT_INJECTION: forcing a failure. [ 1731.599911][ T2850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.613145][ T2850] CPU: 1 PID: 2850 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1731.622945][ T2850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.633072][ T2850] Call Trace: [ 1731.636349][ T2850] [ 1731.639324][ T2850] dump_stack_lvl+0xd6/0x122 [ 1731.643917][ T2850] dump_stack+0x11/0x1b [ 1731.648168][ T2850] should_fail+0x23c/0x250 [ 1731.652635][ T2850] should_fail_usercopy+0x16/0x20 [ 1731.657739][ T2850] _copy_to_user+0x1c/0x90 [ 1731.662155][ T2850] rng_dev_read+0x2bd/0x630 [ 1731.666740][ T2850] do_iter_read+0x370/0x5d0 [ 1731.671299][ T2850] do_preadv+0x159/0x240 [ 1731.675547][ T2850] __x64_sys_preadv+0x54/0x60 [ 1731.680223][ T2850] do_syscall_64+0x44/0xa0 [ 1731.684643][ T2850] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1731.690532][ T2850] RIP: 0033:0x7feb56411ae9 [ 1731.694935][ T2850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1731.714538][ T2850] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1731.723001][ T2850] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1731.730969][ T2850] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1731.738941][ T2850] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:14 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 19) [ 1731.746904][ T2850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1731.755019][ T2850] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1731.763074][ T2850] [ 1731.816127][ T2852] tmpfs: Bad value for 'mpol' 17:00:14 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x3ff, 0x3) open(&(0x7f0000000080)='./file0\x00', 0x4008040, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8915, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x0, @loopback}}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000100)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) [ 1731.934249][ T2858] loop3: detected capacity change from 0 to 1054 [ 1731.982173][ T2858] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1731.992284][ T2858] EXT4-fs (loop3): group descriptors corrupted! [ 1732.007487][ T2861] loop4: detected capacity change from 0 to 1054 [ 1732.032099][ T2864] loop3: detected capacity change from 0 to 1054 [ 1732.039203][ T2864] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1732.049381][ T2864] EXT4-fs (loop3): group descriptors corrupted! [ 1732.056606][ T2861] EXT4-fs (loop4): bad block size 16384 17:00:14 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000007f0000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1732.082162][ T2871] loop4: detected capacity change from 0 to 1054 [ 1732.100989][ T2871] EXT4-fs (loop4): bad block size 16384 [ 1732.159976][ T2880] FAULT_INJECTION: forcing a failure. [ 1732.159976][ T2880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.173205][ T2880] CPU: 0 PID: 2880 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1732.182927][ T2880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.193244][ T2880] Call Trace: [ 1732.196522][ T2880] [ 1732.199470][ T2880] dump_stack_lvl+0xd6/0x122 [ 1732.204065][ T2880] dump_stack+0x11/0x1b [ 1732.208277][ T2880] should_fail+0x23c/0x250 [ 1732.212699][ T2880] should_fail_usercopy+0x16/0x20 [ 1732.217871][ T2880] _copy_to_user+0x1c/0x90 [ 1732.222284][ T2880] rng_dev_read+0x2bd/0x630 [ 1732.226847][ T2880] do_iter_read+0x370/0x5d0 [ 1732.231429][ T2880] do_preadv+0x159/0x240 [ 1732.235742][ T2880] __x64_sys_preadv+0x54/0x60 [ 1732.240452][ T2880] do_syscall_64+0x44/0xa0 [ 1732.245062][ T2880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1732.251022][ T2880] RIP: 0033:0x7feb56411ae9 [ 1732.255436][ T2880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.267974][ T2886] loop3: detected capacity change from 0 to 1054 [ 1732.275225][ T2880] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1732.275250][ T2880] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1732.275262][ T2880] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 17:00:14 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000004000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1732.305913][ T2880] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.314003][ T2880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.321992][ T2880] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1732.330018][ T2880] [ 1732.345594][ T2886] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! 17:00:15 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 20) [ 1732.355825][ T2886] EXT4-fs (loop3): group descriptors corrupted! 17:00:15 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:15 executing program 5: r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) set_mempolicy(0x1, &(0x7f0000003600)=0x2cd6004b, 0xff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x2, 0xff, 0x1f, 0x0, 0xde49, 0x20102, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x5, 0x6a75, 0x2, 0x8, 0x1000, 0x1, 0x0, 0x73b, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r1, 0x3) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.stat\x00', 0x300, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1, 0x0, 0x0) 17:00:15 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x4002) io_setup(0x1, &(0x7f0000000180)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) io_submit(r4, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000380)="a4", 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000140)="21f4aea668f34689ecd6c1878be62f285097d03f34bdb567bf6a571d8db09c2e11dc48a25a81e0505adda99aaac7620c2cc63282b27f1f6402aa7bf7be691c6e949f9ba38714b11b67c0966833934da3f05a9d955bd3a877f22b542ff2f171489a792220da0c9a307f4578b1c96c5aa41eccbbca80d2e1d5b32cbc56a001d7e18932342485a2f000258382ddfd3c79592805b32b9cee10b2236bbd99dec8afd1b4d80fdd730da526ed1cad106da35077f3f877e308249f941fe8e96787fd83803e40974f44", 0xc5, 0x5, 0x0, 0xdd1594ea7d20fd, r1}]) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000300)=""/103, 0x67}], 0x2, 0x0, 0x0) 17:00:15 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000100000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1732.407386][ T2975] loop3: detected capacity change from 0 to 1054 [ 1732.417744][ T2975] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1732.427952][ T2975] EXT4-fs (loop3): group descriptors corrupted! [ 1732.508263][ T3004] loop4: detected capacity change from 0 to 1054 [ 1732.524894][ T3004] EXT4-fs (loop4): Invalid log block size: 64 [ 1732.584657][ T3011] loop4: detected capacity change from 0 to 1054 [ 1732.590089][ T3007] FAULT_INJECTION: forcing a failure. [ 1732.590089][ T3007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.604137][ T3007] CPU: 1 PID: 3007 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1732.613923][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.623980][ T3007] Call Trace: [ 1732.627249][ T3007] [ 1732.630285][ T3007] dump_stack_lvl+0xd6/0x122 [ 1732.634878][ T3007] dump_stack+0x11/0x1b [ 1732.639088][ T3007] should_fail+0x23c/0x250 [ 1732.643505][ T3007] should_fail_usercopy+0x16/0x20 [ 1732.648567][ T3007] _copy_to_user+0x1c/0x90 [ 1732.652985][ T3007] rng_dev_read+0x2bd/0x630 [ 1732.657544][ T3007] do_iter_read+0x370/0x5d0 [ 1732.662170][ T3007] do_preadv+0x159/0x240 [ 1732.666453][ T3007] __x64_sys_preadv+0x54/0x60 [ 1732.671198][ T3007] do_syscall_64+0x44/0xa0 [ 1732.675633][ T3007] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1732.681523][ T3007] RIP: 0033:0x7feb56411ae9 [ 1732.685936][ T3007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.705605][ T3007] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1732.714016][ T3007] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1732.721982][ T3007] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 17:00:15 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 21) 17:00:15 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000007f00000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1732.729947][ T3007] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.737961][ T3007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.745931][ T3007] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1732.754008][ T3007] [ 1732.758710][ T3011] EXT4-fs (loop4): Invalid log block size: 64 17:00:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0xa}, 0x10001) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="b2a57255675fc78d316db932e67330dedfacc01d27541b78375ce6bf7cda44eddbe213a1b526ef5d77fb3b00d12058b940551a32dd64b925627531dbf1b49e30f76cbc263ac6f970", 0x48, 0x844, 0x0, {0x0, r6}}, 0x3) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r1, 0x0, 0x0, 0x8, 0x8, 0x1, {0x0, r6, r1}}, 0x8000) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="b2a57255675fc78d316db932e67330dedfacc01d27541b78375ce6bf7cda44eddbe213a1b526ef5d77fb3b00d12058b940551a32dd64b925627531dbf1b49e30f76cbc263ac6f970", 0x48, 0x844, 0x0, {0x0, r8}}, 0x3) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="b2a57255675fc78d316db932e67330dedfacc01d27541b78375ce6bf7cda44eddbe213a1b526ef5d77fb3b00d12058b940551a32dd64b925627531dbf1b49e30f76cbc263ac6f970", 0x48, 0x844, 0x0, {0x0, r10}}, 0x3) syz_io_uring_submit(r0, r3, &(0x7f00000015c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0x0, {0x0, r10}}, 0x7) io_setup(0x2, &(0x7f0000000500)) [ 1732.879949][ T3124] loop3: detected capacity change from 0 to 1054 [ 1732.890977][ T3124] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1732.901085][ T3124] EXT4-fs (loop3): group descriptors corrupted! [ 1732.963582][ T3132] loop3: detected capacity change from 0 to 1054 [ 1732.970883][ T3132] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)! [ 1732.981053][ T3132] EXT4-fs (loop3): group descriptors corrupted! [ 1732.995326][ T3140] FAULT_INJECTION: forcing a failure. [ 1732.995326][ T3140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.008684][ T3140] CPU: 1 PID: 3140 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1733.018460][ T3140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.028530][ T3140] Call Trace: [ 1733.031803][ T3140] [ 1733.034784][ T3140] dump_stack_lvl+0xd6/0x122 [ 1733.039370][ T3140] dump_stack+0x11/0x1b [ 1733.043522][ T3140] should_fail+0x23c/0x250 [ 1733.047964][ T3140] should_fail_usercopy+0x16/0x20 [ 1733.053005][ T3140] _copy_to_user+0x1c/0x90 [ 1733.057419][ T3140] rng_dev_read+0x2bd/0x630 [ 1733.061959][ T3140] do_iter_read+0x370/0x5d0 [ 1733.066521][ T3140] do_preadv+0x159/0x240 [ 1733.070770][ T3140] __x64_sys_preadv+0x54/0x60 [ 1733.075488][ T3140] do_syscall_64+0x44/0xa0 [ 1733.079927][ T3140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.085857][ T3140] RIP: 0033:0x7feb56411ae9 [ 1733.090272][ T3140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 17:00:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000}, 0x0, 0x0, 0x0, 0xe069ee573628d9d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007fff) close(r0) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r0, r1, 0x0, 0x20102d) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500003825000008190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000e06010200c2c393b4000000000000000500000609001e0073797a31"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) [ 1733.109882][ T3140] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1733.118295][ T3140] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1733.126270][ T3140] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1733.134321][ T3140] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.142290][ T3140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.150262][ T3140] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1733.158241][ T3140] 17:00:15 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 22) 17:00:15 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1733.246311][ T3146] loop4: detected capacity change from 0 to 1054 [ 1733.273249][ T3146] EXT4-fs (loop4): Invalid log block size: 127 [ 1733.293636][ T3150] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1733.301988][ T3149] loop4: detected capacity change from 0 to 1054 [ 1733.309555][ T3149] EXT4-fs (loop4): Invalid log block size: 127 17:00:16 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000001000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) [ 1733.550143][ T3269] loop3: detected capacity change from 0 to 1054 [ 1733.561229][ T3268] FAULT_INJECTION: forcing a failure. [ 1733.561229][ T3268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.574542][ T3268] CPU: 0 PID: 3268 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1733.584324][ T3268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.594369][ T3268] Call Trace: [ 1733.597635][ T3268] [ 1733.600563][ T3268] dump_stack_lvl+0xd6/0x122 [ 1733.605160][ T3268] dump_stack+0x11/0x1b [ 1733.609317][ T3268] should_fail+0x23c/0x250 [ 1733.613735][ T3268] should_fail_usercopy+0x16/0x20 [ 1733.618828][ T3268] _copy_to_user+0x1c/0x90 [ 1733.623373][ T3268] rng_dev_read+0x2bd/0x630 [ 1733.627886][ T3268] do_iter_read+0x370/0x5d0 [ 1733.632405][ T3268] do_preadv+0x159/0x240 [ 1733.636676][ T3268] __x64_sys_preadv+0x54/0x60 [ 1733.641386][ T3268] do_syscall_64+0x44/0xa0 17:00:16 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1733.645918][ T3268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.651811][ T3268] RIP: 0033:0x7feb56411ae9 [ 1733.656220][ T3268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.675829][ T3268] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1733.684243][ T3268] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1733.692213][ T3268] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1733.700500][ T3268] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1733.701862][ T3273] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1733.708499][ T3268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.708515][ T3268] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1733.732544][ T3268] 17:00:16 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 23) [ 1733.745152][ T3273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=3273 comm=syz-executor.0 [ 1733.760854][ T3269] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (512) 17:00:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x45}, {0x5c}, {0x6, 0x0, 0x0, 0x7fff7ffd}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x9, 0x80, 0x9, 0x2}]}) [ 1733.814584][ T3280] loop3: detected capacity change from 0 to 1054 [ 1733.821878][ T3280] EXT4-fs (loop3): bad geometry: first data block 512 is beyond end of filesystem (512) [ 1733.826898][ T3274] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 17:00:16 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000040200000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1733.870897][ T3286] loop4: detected capacity change from 0 to 1054 [ 1733.894341][ T3286] EXT4-fs (loop4): Invalid log block size: 256 [ 1733.919709][ T3291] loop5: detected capacity change from 0 to 4096 [ 1733.937576][ T3291] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1733.964719][ T3301] loop4: detected capacity change from 0 to 1054 [ 1733.973577][ T3301] EXT4-fs (loop4): Invalid log block size: 256 [ 1734.000062][ T3295] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1144: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 1734.034104][ T3410] FAULT_INJECTION: forcing a failure. [ 1734.034104][ T3410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.047312][ T3410] CPU: 0 PID: 3410 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1734.057031][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.067119][ T3410] Call Trace: [ 1734.070389][ T3410] [ 1734.073383][ T3410] dump_stack_lvl+0xd6/0x122 [ 1734.077997][ T3410] dump_stack+0x11/0x1b [ 1734.082145][ T3410] should_fail+0x23c/0x250 [ 1734.086565][ T3410] should_fail_usercopy+0x16/0x20 [ 1734.091591][ T3410] _copy_to_user+0x1c/0x90 [ 1734.096008][ T3410] rng_dev_read+0x2bd/0x630 [ 1734.100510][ T3410] do_iter_read+0x370/0x5d0 [ 1734.105078][ T3410] do_preadv+0x159/0x240 [ 1734.109315][ T3410] __x64_sys_preadv+0x54/0x60 [ 1734.114000][ T3410] do_syscall_64+0x44/0xa0 [ 1734.118425][ T3410] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.124312][ T3410] RIP: 0033:0x7feb56411ae9 [ 1734.128726][ T3410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.148593][ T3410] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1734.157000][ T3410] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1734.164969][ T3410] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1734.173027][ T3410] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:16 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "2156816c73038c"}) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000580)={"0ad97e486c0185a808da5c84f7b3cc75", 0x0, 0x0, {0x6, 0x6}, {0x8, 0x7f}, 0x1650000000000000, [0xf7c, 0x81, 0x117d, 0xffffffffffffffff, 0x2, 0x100, 0x101, 0x2, 0x7, 0x0, 0x5, 0x1, 0x9, 0x37d2, 0x81, 0xbc]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000680)={{r5}, r6, 0x6, @unused=[0x7fffffff, 0x1356a9c9, 0x6, 0x5], @devid}) copy_file_range(0xffffffffffffffff, &(0x7f00000004c0)=0x26, 0xffffffffffffffff, &(0x7f0000000540)=0x400, 0x6, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_io_uring_setup(0x2b2d, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r8, 0x450e, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8, 0x4, 0x5, 0x5, 0x0, 0x3ff, 0x122, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x4000}, 0x402, 0x7fffffff, 0x10000, 0xd, 0x3c, 0x3, 0x0, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r0, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x1, "060cd6bed5f770"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d2942fff0b96f7cd3f7c334103c10bbcf725a69e7edf68e4a24753a0691df1b5c39197e566fda880fba60715c8c3e97e1cf70ae8287d9d744c344130dbccee8c610feea1825ee9830deb17e95e807034ff79ab03d705862763678a08d8f5fbfe93d87165817ebf4e6cd2a1b8b320d0a"]) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x32}, 0x20, 0x1) 17:00:16 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000002000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:16 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 24) 17:00:16 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1734.180993][ T3410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.188964][ T3410] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1734.196930][ T3410] 17:00:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x800000000013) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r2, 0xe5714000) fcntl$setstatus(r0, 0x4, 0x44c00) [ 1734.293778][ T3522] loop3: detected capacity change from 0 to 1054 [ 1734.311991][ T3522] EXT4-fs (loop3): bad geometry: first data block 516 is beyond end of filesystem (512) [ 1734.352684][ T3530] loop3: detected capacity change from 0 to 1054 [ 1734.360420][ T3530] EXT4-fs (loop3): bad geometry: first data block 516 is beyond end of filesystem (512) [ 1734.411039][ T3539] loop4: detected capacity change from 0 to 1054 [ 1734.421785][ C0] sd 0:0:1:0: tag#4323 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1734.431618][ C0] sd 0:0:1:0: tag#4323 CDB: opcode=0xe5 (vendor) [ 1734.437945][ C0] sd 0:0:1:0: tag#4323 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1734.446974][ C0] sd 0:0:1:0: tag#4323 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1734.455996][ C0] sd 0:0:1:0: tag#4323 CDB[20]: ba 17:00:17 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000300000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1734.469645][ T3537] FAULT_INJECTION: forcing a failure. [ 1734.469645][ T3537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.478798][ T3538] tmpfs: Unknown parameter ')Bÿð¹o|Ó÷Ã4<»ÏrZiçíöŽJ$u:‘ß\9~VoÚˆº`q\Œ>—áÏp®‚‡Ù×DÃD¼ÎèÆþê%î˜0Þ±~•èO÷š°' [ 1734.482937][ T3537] CPU: 1 PID: 3537 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1734.482963][ T3537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.483005][ T3537] Call Trace: [ 1734.483012][ T3537] [ 1734.483018][ T3537] dump_stack_lvl+0xd6/0x122 [ 1734.525481][ T3537] dump_stack+0x11/0x1b [ 1734.529654][ T3537] should_fail+0x23c/0x250 [ 1734.534143][ T3537] should_fail_usercopy+0x16/0x20 [ 1734.539251][ T3537] _copy_to_user+0x1c/0x90 [ 1734.543686][ T3537] rng_dev_read+0x2bd/0x630 [ 1734.548284][ T3537] do_iter_read+0x370/0x5d0 [ 1734.552786][ T3537] do_preadv+0x159/0x240 [ 1734.557062][ T3537] __x64_sys_preadv+0x54/0x60 [ 1734.561742][ T3537] do_syscall_64+0x44/0xa0 [ 1734.566217][ T3537] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1734.572119][ T3537] RIP: 0033:0x7feb56411ae9 [ 1734.576543][ T3537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.596244][ T3537] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1734.604658][ T3537] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1734.612667][ T3537] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 17:00:17 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 25) [ 1734.620650][ T3537] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.628630][ T3537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.636617][ T3537] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1734.644660][ T3537] [ 1734.649635][ T3539] EXT4-fs (loop4): Invalid log block size: 512 17:00:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180)=0x1d35, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x3, 0x0, &(0x7f0000000500)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/1, 0x1, 0x0, &(0x7f0000000040)=""/65, 0x41}, &(0x7f0000000100)=0x40) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x9, 0x1, 0x10, @empty, @mcast2, 0x7, 0x7800, 0x9, 0x7fff}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@flushpolicy={0x1c, 0x1d, 0x420, 0x70bd27, 0x25dfdbff, "", [@mark={0xc, 0x15, {0x35075c, 0x20}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6}, 0x10) [ 1734.712780][ T3638] loop4: detected capacity change from 0 to 1054 [ 1734.733063][ T3638] EXT4-fs (loop4): Invalid log block size: 512 17:00:17 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000402000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1734.857886][ T3663] loop3: detected capacity change from 0 to 1054 [ 1734.886186][ T3663] EXT4-fs (loop3): bad geometry: first data block 768 is beyond end of filesystem (512) [ 1734.929871][ T3662] FAULT_INJECTION: forcing a failure. [ 1734.929871][ T3662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.943215][ T3662] CPU: 1 PID: 3662 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1734.953041][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.963347][ T3662] Call Trace: [ 1734.966619][ T3662] [ 1734.969592][ T3662] dump_stack_lvl+0xd6/0x122 [ 1734.974203][ T3662] dump_stack+0x11/0x1b [ 1734.978357][ T3662] should_fail+0x23c/0x250 [ 1734.982777][ T3662] should_fail_usercopy+0x16/0x20 [ 1734.987809][ T3662] _copy_to_user+0x1c/0x90 [ 1734.992351][ T3662] rng_dev_read+0x2bd/0x630 [ 1734.996892][ T3662] do_iter_read+0x370/0x5d0 [ 1735.001453][ T3662] do_preadv+0x159/0x240 [ 1735.005748][ T3662] __x64_sys_preadv+0x54/0x60 [ 1735.010421][ T3662] do_syscall_64+0x44/0xa0 [ 1735.014881][ T3662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1735.020777][ T3662] RIP: 0033:0x7feb56411ae9 [ 1735.025340][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.044949][ T3662] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1735.053567][ T3662] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1735.061540][ T3662] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1735.069518][ T3662] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.077532][ T3662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.085516][ T3662] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1735.093642][ T3662] [ 1735.100189][ T3680] loop3: detected capacity change from 0 to 1054 [ 1735.108548][ T3680] EXT4-fs (loop3): bad geometry: first data block 768 is beyond end of filesystem (512) 17:00:17 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=0x4027fb, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendfile(r1, r1, &(0x7f0000000140)=0x8c1, 0x80000000) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x4c823, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000440), 0x6}, 0x8, 0x100000000, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000746000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) dup2(r3, r2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000002c0)='^\x00\xd0\xa1FZ\xf4\x9d\xcc\x85/\xe6I!\xd9\xe9\x16\x9fA ,\xdd\xca\xf0\xe6<\x05T\xcf\xce\xa0%q\xe6\xf2o\xd8\xfd\xdfh\x80)\xd2\xa2\x93\x03\xeev[7\xbb\x1d%bi\xf7*\f\xceY\xa7\x1c\x92j\x99\xfd\xa9\x17[\xa2\x85\x025\x10\xff^\x1e\x9f\f\xcbJ\x1c \xcd\xe5\xf3\xbc\x96\xa9\xe9\x15\x85\x89\xa7\x88\xac9\x03g\x86\xb9K&\xc5)\xa0\ay\xe8X\xb8.\xe9\xf36\x85\"g\xb9\xc7\xc0\xbe>\xad\x06\x92\x85\xf3V\x0f9}\xfd\xe8\xd3\xa5\x86\xd8\xd6\xa5\x1b\x1f\t\x9aM\x00\x1e\xf61\x9d<+\xadv\xca\xb5\xe4.o\xb5\xbb\x94\xb0v\xb6\x17m\xfd\xc5.\xeeo\xffYZX\x85b#\x03\xdb\xf2\xc2\x8e6\x94L\xe2\xa1\x02\xcePk\x80\xa2\a\x91\x82\xd6\"K/\x17\xcd\xf4\xff\xbc\xa1\x8az\xf7yhK5)\x89\x18\xa9\'\xa1\xe8\x87\xb9\xb6', 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000480)=[{0x7ff, 0x7, 0x3e, 0x1f59b0fd}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x1f4}, 0x700) [ 1735.127591][ T3781] loop4: detected capacity change from 0 to 1054 17:00:17 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 26) 17:00:17 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000400000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:17 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000003000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1735.156448][ T3781] EXT4-fs (loop4): Invalid log block size: 516 [ 1735.192728][ T3789] loop4: detected capacity change from 0 to 1054 [ 1735.200077][ T3789] EXT4-fs (loop4): Invalid log block size: 516 17:00:17 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1735.341158][ T3801] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1735.352163][ T3801] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1735.361949][ T3802] FAULT_INJECTION: forcing a failure. [ 1735.361949][ T3802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.375185][ T3802] CPU: 0 PID: 3802 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1735.384908][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.394965][ T3802] Call Trace: [ 1735.398249][ T3802] [ 1735.401214][ T3802] dump_stack_lvl+0xd6/0x122 [ 1735.405810][ T3802] dump_stack+0x11/0x1b [ 1735.409962][ T3802] should_fail+0x23c/0x250 [ 1735.414446][ T3802] should_fail_usercopy+0x16/0x20 [ 1735.419503][ T3802] _copy_to_user+0x1c/0x90 [ 1735.423925][ T3802] rng_dev_read+0x2bd/0x630 [ 1735.428481][ T3802] do_iter_read+0x370/0x5d0 [ 1735.433035][ T3802] do_preadv+0x159/0x240 [ 1735.437285][ T3802] __x64_sys_preadv+0x54/0x60 [ 1735.441971][ T3802] do_syscall_64+0x44/0xa0 [ 1735.446474][ T3802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1735.452373][ T3802] RIP: 0033:0x7feb56411ae9 [ 1735.456799][ T3802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.476492][ T3802] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 17:00:18 executing program 5: r0 = open(&(0x7f0000000040)='./file1\x00', 0x34240, 0x170) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000001c0)=0x1) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x80082) dup2(r1, r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="e3280ea353a68d0d7b452b2de96ae77c48ef6b6f5536212f14aba7e69e7c12dd3c1faa1bfd2ab6f7c16b", 0x2a}, {&(0x7f0000000100)="fb7f67c1277d59d425eae38c32b272089108788f30a4201d8109000000000000009d84c91cfdb27e6e5315be3ad6cb719af9ace4349e038a872ff30e", 0x3c}], 0x2, 0x1, 0xfdc, 0x14) 17:00:18 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 27) [ 1735.484986][ T3802] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1735.492992][ T3802] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1735.500955][ T3802] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1735.508915][ T3802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.516873][ T3802] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1735.524854][ T3802] 17:00:18 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x5, 0x0, 0x5, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0100001dc4d12f2a470e090f68a08d3ab2fca2a399af161c9f42592600"/39, @ANYRES16=0x0, @ANYBLOB="0008000000000000000013000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100ff7f0000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001100050000000e0001006e657464657673696d0000000f0002006e657464657673690b000800000006001100000000000800010070636900110002c110100abd3793b43500303030303a30303a31302e3000000000080003000200000008000b00000000000600110001010000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0000000000060011000800"/287], 0x11c}}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x20, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/147, 0x93}]}, &(0x7f0000000f00)="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", &(0x7f0000000300)=""/25, 0x3, 0x1, 0x2, &(0x7f0000000440)}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FITHAW(r1, 0xc0045878) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000480)}, 0x150, 0x0, 0x1ff, 0x5, 0xfca, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669703d30784a30303030303030303030b1d702c94e7b0f050000006f6e3d3970323030302e752c766572736b6f6e3d3970323030322e752c6c6f6f73652c64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f3", 0x0, &(0x7f0000000340), 0x0) [ 1735.558551][ T3908] loop3: detected capacity change from 0 to 1054 [ 1735.584528][ T3908] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (512) [ 1735.596080][ T3911] loop4: detected capacity change from 0 to 1054 [ 1735.618630][ T3911] EXT4-fs (loop4): Invalid log block size: 768 [ 1735.663289][ T3917] loop4: detected capacity change from 0 to 1054 [ 1735.663958][ T3920] loop3: detected capacity change from 0 to 1054 [ 1735.676782][ T3917] EXT4-fs (loop4): Invalid log block size: 768 [ 1735.678131][ T3920] EXT4-fs (loop3): bad geometry: first data block 1024 is beyond end of filesystem (512) 17:00:18 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000004000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:18 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000500000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:18 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x3}, 0x2206, 0x0, 0x0, 0x6, 0x0, 0x688c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) r1 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r2 = creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400) open$dir(0x0, 0x92084, 0xc0) r3 = socket$inet6(0xa, 0x4, 0xf1) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20008019, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty, 0x4000020}, 0x1c) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(r1, 0x40247007, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) fdatasync(r2) ftruncate(r5, 0x7fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 1735.841049][ T4040] FAULT_INJECTION: forcing a failure. [ 1735.841049][ T4040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.854352][ T4040] CPU: 1 PID: 4040 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1735.864068][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1735.874400][ T4040] Call Trace: [ 1735.877730][ T4040] [ 1735.880655][ T4040] dump_stack_lvl+0xd6/0x122 [ 1735.885247][ T4040] dump_stack+0x11/0x1b [ 1735.889420][ T4040] should_fail+0x23c/0x250 [ 1735.893862][ T4040] should_fail_usercopy+0x16/0x20 [ 1735.898933][ T4040] _copy_to_user+0x1c/0x90 [ 1735.903380][ T4040] rng_dev_read+0x2bd/0x630 [ 1735.907952][ T4040] do_iter_read+0x370/0x5d0 [ 1735.912505][ T4040] do_preadv+0x159/0x240 [ 1735.916771][ T4040] __x64_sys_preadv+0x54/0x60 [ 1735.921528][ T4040] do_syscall_64+0x44/0xa0 [ 1735.925953][ T4040] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1735.931846][ T4040] RIP: 0033:0x7feb56411ae9 [ 1735.936266][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1735.955869][ T4040] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1735.964360][ T4040] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1735.972366][ T4040] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1735.980390][ T4040] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:18 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 28) [ 1735.988474][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1735.996486][ T4040] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1736.004452][ T4040] 17:00:18 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x5, 0x0, 0x5, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0100001dc4d12f2a470e090f68a08d3ab2fca2a399af161c9f42592600"/39, @ANYRES16=0x0, @ANYBLOB="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"/287], 0x11c}}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x20, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/147, 0x93}]}, &(0x7f0000000f00)="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", &(0x7f0000000300)=""/25, 0x3, 0x1, 0x2, &(0x7f0000000440)}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FITHAW(r1, 0xc0045878) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000480)}, 0x150, 0x0, 0x1ff, 0x5, 0xfca, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669703d30784a30303030303030303030b1d702c94e7b0f050000006f6e3d3970323030302e752c766572736b6f6e3d3970323030322e752c6c6f6f73652c64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f3", 0x0, &(0x7f0000000340), 0x0) [ 1736.038498][ C0] sd 0:0:1:0: tag#4312 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.048343][ C0] sd 0:0:1:0: tag#4312 CDB: opcode=0xe5 (vendor) [ 1736.054685][ C0] sd 0:0:1:0: tag#4312 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.063727][ C0] sd 0:0:1:0: tag#4312 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.072766][ C0] sd 0:0:1:0: tag#4312 CDB[20]: ba [ 1736.109386][ C0] sd 0:0:1:0: tag#4333 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.119236][ C0] sd 0:0:1:0: tag#4333 CDB: opcode=0xe5 (vendor) [ 1736.125590][ C0] sd 0:0:1:0: tag#4333 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.134621][ C0] sd 0:0:1:0: tag#4333 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.144280][ C0] sd 0:0:1:0: tag#4333 CDB[20]: ba [ 1736.151004][ T4054] loop3: detected capacity change from 0 to 1054 [ 1736.177590][ T4054] EXT4-fs (loop3): bad geometry: first data block 1280 is beyond end of filesystem (512) [ 1736.195886][ T4061] loop4: detected capacity change from 0 to 1054 [ 1736.218474][ T4061] EXT4-fs (loop4): Invalid log block size: 1024 [ 1736.234323][ T4067] loop3: detected capacity change from 0 to 1054 [ 1736.243885][ T4067] EXT4-fs (loop3): bad geometry: first data block 1280 is beyond end of filesystem (512) [ 1736.261190][ T4066] FAULT_INJECTION: forcing a failure. [ 1736.261190][ T4066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.262118][ T4077] loop4: detected capacity change from 0 to 1054 [ 1736.274576][ T4066] CPU: 0 PID: 4066 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1736.290389][ T4066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.300463][ T4066] Call Trace: [ 1736.303734][ T4066] [ 1736.306666][ T4066] dump_stack_lvl+0xd6/0x122 [ 1736.311257][ T4066] dump_stack+0x11/0x1b [ 1736.315501][ T4066] should_fail+0x23c/0x250 [ 1736.319948][ T4066] should_fail_usercopy+0x16/0x20 [ 1736.324997][ T4066] _copy_to_user+0x1c/0x90 [ 1736.329530][ T4066] rng_dev_read+0x2bd/0x630 [ 1736.334047][ T4066] do_iter_read+0x370/0x5d0 [ 1736.338547][ T4066] do_preadv+0x159/0x240 [ 1736.342837][ T4066] __x64_sys_preadv+0x54/0x60 [ 1736.347544][ T4066] do_syscall_64+0x44/0xa0 [ 1736.350410][ T4077] EXT4-fs (loop4): Invalid log block size: 1024 [ 1736.351965][ T4066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1736.351991][ T4066] RIP: 0033:0x7feb56411ae9 [ 1736.352010][ T4066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.352029][ T4066] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1736.388729][ C1] sd 0:0:1:0: tag#4343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.396893][ T4066] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1736.406807][ C1] sd 0:0:1:0: tag#4343 CDB: opcode=0xe5 (vendor) [ 1736.414728][ T4066] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1736.414746][ T4066] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.414760][ T4066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.421084][ C1] sd 0:0:1:0: tag#4343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.429010][ T4066] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 17:00:19 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:19 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000600000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:19 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000005000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 29) 17:00:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x5, 0x0, 0x5, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0100001dc4d12f2a470e090f68a08d3ab2fca2a399af161c9f42592600"/39, @ANYRES16=0x0, @ANYBLOB="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"/287], 0x11c}}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x20, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/147, 0x93}]}, &(0x7f0000000f00)="4610cd5e1df2dd24486692f8c76cccae4f59bed9cfb8eb72b2463ca28a2445efee1c410d5c8e260057c9fa258bfd2dd912af8224732f69bd9f1973654bdf8064d8370194f9284ebe1921ec4e48dc02e72f645b657e91d7d54a7c5b5c1a9a5decde08dacee36459c32b50b208b4b71cfc6f99167dd23c7985731bb9857f2ac4b8d4ed9858066e4f68fda2c8d33cbed2b535de5cc9ca372fddac505c147c5c6650fccfdec59510362e6bb5655eb5d5bc5fefb1d6444bd0e566f4737c8129a971c01539953798dc8369a6ecc4a67765e1f50b53853128008d9faf28939b2a605ad072eed1da8a37cf27c22ae1441d333d60ce6184120d8cb932d0470482e9b8a0a5557e787de5e7d940fcc63617f47326280763f0108214e5c120aea4d30ee05fafcce5918c554453971d645fd6a7f2b6e80adbf7bdcba912a2b3729d6323d06c20fd2354f030a0d001d5dacc9a72f295a805d639e1f308af93ef60d1d58bc6387d2eda9bc59541f9941054d6c865f13952261185f8ead6377ac647fc09b89a009f17644eeb19f005c2ce7699268da8d3ed50beed4876590d63637bcf60d5008e3fea0bf8026f639259098a1abc93ae0fc80aedd852b6864611429802f7545b38662fc930bb5817406d978bf734d1334b6a60c7586668d80fffb17d8ebdd0e484af0d097c14bc566aff8cc206b748f5f5e64a1e6a67a35793a0ee38723df0fa6385f73d10d20a17d33f21a08c73c622663a9fc894dd5a22dfab7184e9966108b30c4fe633fd04b0dc9be6f090f36643ca18bb216c3470313ad4b91cbb3f71f7650ed9e24e0f565f49b2e586f3543e072ffcb3f67dd0140a12bfb3831160e87dacdcb8d33456d3d12cf8f981599842587588d7edb36b7e81b4abdb4df661edaae0286e681ee18611d78e44c16c8806e674134e9989c11a82ada4db41dbe5050d0cab245153e671c51826844fc9173cd8e7bda4457177934639dcd665e63556f09aeed0e4bbbcb70f497162f5a0b6af7058a800454702f7d19db3885111775f95eb2057f8205fd4b8410da17a50ca7ca39aba8d69d2474beb34164fe8d78213ae45f2b628e30078d986ff5653962813ac595337ce815ba3f07dc7b39e21b51d38e27c7335002cb9de8c8697362b60fb43fdbe5fd4175bfd914f8bc3798cbb54c1133d078dfcf66b3f59fdfe9a60d872af58346f5ef45b9b10911af9ea08dc0ddfac857b2b7362b8ed4b0e85e99a06d30fa5b43fa9e3b66bb8934da69e546779a107416d687909afd118d2103a239e54a493eb046626ea8a99b38a01e1248f5872077136a38aba62eb83837fa7db4ed79bb612825e3247ef21580786552555de75551597400b06b88cdb4931ad2e4b269043c1ff56dca593ef8a10b85efe5951b00f6f0d4e3060f3fd936b2921779e1f33833cdf454197b8e21ba48871da26ca0ae384c5856c42abde453da06aa46a30237750df8f7b9987beeac897594bea834c13891d6789d973e35d1552abd3f3e969a24243cc9b6805c9dd3d0325f4fb4580f20bc7dbe9d3b16891dc4ec931d4b04aa75e5b71f49f4efee0473571d851d3d6354f718031ff736e50b3bb855dcfff73194c4e1009ce859899bc926e80fc0e871bf59a73a6e8674854793e3791bbaa43bac362da9ce93aeaa6d2eecc7a9595b9b26dcd52757d49d44b9911f4366396886eba68b4749ec574aa37079007c4cb84776fe5b7b505191c195288dfee68ad53fd2c024bab89876d38b696270e1cf607b8b22a1e3763b66a7eced124e60540c5c35e0997104be2a1a26fac04067dac2cdfa78d332cb35cd108a0f4528816feb1c887ca36fcff89e4ba1ca3879ffb5bcb1248349a4b33a9d0304cbe380ffb5adcf413cf646a81ab1096e66763223289d589fa3b632b702146d67fb754ef709edf3a80759a2335bfe57ee1c4264c4583f63c5e863f726c78d4fd369bcb99ecfd2d296c1df3dbd4f0f0350452dc3b7b08e1ef8c824e3dc3ac121e30f3bdce7b3f0c457acab2cea47ab6d418f3cbf2e57dbe80c1515ed1072993e7a56d4ea5ec45eeee21cbc2ae108edbef45831ad14342430eeae6db172c8c10832f20a297dbd37038b618c86e21beac69c0f1dd47670ab5946b947b545b5aa03f49f1bac662c089f2bd185008c2fc6af57fb0f6b43f774737fa0293517336662521168852de18633e6106bf7a1bd4b5d88ff51aa7668b53c65fc8d53db58c642eebc9d2d3c58c9f8d129e1140de2233e0e8abbd9261ab6a4c026200c45d7f3e7cbf07de0242650c11693f7dfbe4523ceb5ff0917aba7b81630006e1ddce1305231f4b69917d68fa461ced02d9f92b639d958fe7b61d3811b647d4a7cd4fb74d0688af25cf25e4aa2433591db7428c8a4f2156e7b913fc32170d56b386800c0b9223e224a0a32f251cdb3345fe1f0609db1c16469f78c37a3d5fa1fcc1217fdf8faacae0e9d0b65b905cfaefa99dc425cd169da09ea562ee65d32abfb0d5691325a8f88299f2aac478f74531658f4500732d156b505c1c72f7c00f8ece529748030673e7594bc7e6029faf763116e7e19d2cb21e4c1e6290d22419bbc59437ee08616fe48255ba8980c9ab735ec423c51bc513d7eec9cc4552b730d575f748a002b10d91c2d2276fc85599734ba7ff21ad29c40e5caf6f44b39e9c6b3157b55adddfb179a8796b43092d3703e166b2ce21c7a6eb65ed487b427bb7383582ca5baf5ccd9fe211f92d2585ab3e2878604e346decd25859fa6ea46096858ed98963090776465758f237b28ca87ae845668bed57492e69239a6c83a31aa5b276f4034077e8b0339da5ece65b537dd0b112b4e3e187065bf2b2a6e813ab37b256afe255c0d46b1cddb2a8692f86f8632b8c3e2b1974eb6816b02a85c95516398e232ca6e07cba58954a0a94c282be9f5c2e868d8620452a9c8fd5d1e97bc6a2bd276b10bece49f91f8e9b47ebec88dc8440a1aff93fb64b8c0a4ef4154500cfb865620f0c80da3aaf53bf026b08399872613e1fb3a8c2d13a1a5e6acae8ebe6820d2442c4b117ec7512ada6b95e1786060c8ee9d2fa59e034cc32a3d10374b96ecbe1baeb997ab0f28cd58ee18df71758b6aa445b195f018e7b452f8786709ca8b7dc0e3b4cef14bd650bd7e4de9269e01675c2fa99f100d3da5637b96e8548fc4b8aaa38c1daabd21ee08870a5f39fded99299d05e9fcd6baf5c34ba0321cc88ff193d9207572b409cd7d94230637a3fe1fe04aca78d7f190fc9b6c0e20c7970361f610d3e148e983bcd06b90f53363f98ff49bc271c331b0f886a36be44df1e3bbd3158670a16e1f81f32cbd8256367e2f481ae5e6def5c0ef36f71ab9d5e4697664aa77bd8a9f55083453a46aa8f14b9d88f2478d03656224a7f11f9d68b2fba6444939a020d98211cfe19411a02ce64ab51f5e2fe354f05e5d1c07523abbdf414ef58b67caf9abd4dfb4e456138dc33e7a6cec388447d37de8dbeb602ef60f9b95c52eddc3228fe449bc9fbd2179bc96506d24aa99e830218aa734f0fe91e3bf3547473416a6b16e4846ebc4fecfbca6d51512327c7f44e615c3fa9db76693a89ee666f41b0c699d4e2dff92c9a2cd6338629645fb025ae413870c7bf3c03a2eb067af2ffe67250c2565e3acb52dffb2377aa3ca8382904bf70215fc2ca2b43d876326c5ab9d908f6e3bdb48ff5f2d31e9fb85ec3fcc887e132dd028b7b124938b4551a7b4ba1057723f56a0ec8ea84c27fbe92e4ef5a20d64c9b518039b34160b80bdfd0668061b60d02d09832bab647eb65d9c59e9c6ef2057adfe3d729397569203edc1ec4eb4cd1be4852a7eb5fa40e2e0f0209b9e9b262404e141a9d3e42f426a8fd38973d394995f84f74509e196d0514be164c87680f83b4e15425c00c29b7ea371eb131a9d2088bd615f6ad24c64fce5476379db9b587e275bdb8dc8458ebcbd41954c9dc42e937c1342d147ee407c671d02c0cc85c684f95d45109e56fd319791d153185251602309f527864e59f6cf2d2c1c9877bc4e482c79d69a55c3985e77b560a8d301615fea0a4bddca8d5d13ac668353cb1e7df8117f50b10b1a7108a0399a0602363417ccb5d114ee45ce399945b6abb380602e37fff0ae5d0bdd2217c2a27278f5cef88bfd2b28b1de02713eb7508cbedcb46afb76e78e7a05270efa697bca0bdde9f434aba1dba23c88d2d382cb85abe7c5ca6993f51a94b8a07b8f75a3c2feda9ebde29d476ce676cf6df545ae2bc4b436b847e2fb5e3ad0807225637698681509eb6afb9d011010cb6208624970369482c36930a0b9c7d7dcb7dee33849908fbe91b52f19f82531b740f525033569bf9ec27212de671d1d1e4f999ce71a791573a67319db60fb8b97cb8fd1f2edcf97526eb4fda45cdd959e1d65ee8a54ef63814d07d910bbbf780604ddcc9b866cdd9f28c68da2eac43181682015f3d171baa1379aeee29923a1606c0b0b1dbd8d0ea237d806d4818c9d65bca0ce51dc11a72d154c37a2382900c660a4b80ea9849ef1ebab303aa29bd8a3ae1ecf36cec89a15b3ca18a8c17a0ff156db82e78ef7ec06a1b5694f3d2103d43d9ce3ea4db4f288b24911d02d167de6ef612183189cb3e2925926a342fda473c5c5fb511efbe1bdb9d3e3477a04886cda5bfc52a6f00613476dfe92e39323fe8d5e5717168c2b19ad422f2ae19cb8d7fd537d8e6e7da560f03b9913493a8fb18aca78f8a7cec94486077bf475376e68ffa462036802b46388f8cf1a9e0c7a2f19b692fc801e4854b3be1fcff0c1ca7ad570dfca25bd6d8aed2885a1663a6c2557aa1a5a6fb50059a27b97d5913b40989e7ae0d2799806b40e7cab7d49865538f24d5e23701efd21bc2d0f9d22db735c92e8bd56c9986fef598f22d207fbb16f3e161550e1aaf5eedbf5f71df53ff8ec4004a222f1dd368227331ac9b3dbfb0891807588e9b53bf3d357868e3d72ef3d6d83439f9dce2510c0a249b03d28f3900ea213a3fc1e6bbc6e9f745f6510f025a28d26881febb05cb920bb61c17f3b975743c7b65e74e9fa57f30fda45101c06d21019dcc2fe51e573313749bfaa3d345772f7407d390c63539d72f5f9b009fda6d068a4cd5c05718c7902da2f45b7d08e632afa6b8d1cafce8485c03abec7ec377c00132324911bcdf46ed997d89e8249c8b9295aa56bff300c328dc697e1bd2a7cbd4fc42f43c2cbc559fef2be4980223b520b5b9f0bad2718581c78c52e20b8d4304be317615be6b9d16c6ac87990b2716302362d29acf732afde817001c63cfaa1abbdbf3a1eb56998d1e226c1511c55f88394bc8e7e2d1625a3fd553c5703acae2315e86763dbea3c080acae8abde2bd52fb144fb3a6cf84471d94def5444b6b0bd289b0047579eca26fb3db49e4471b3f550ba016416c1d98cebc1608262ea2b56ae4a8b9bafb1324d0b48e45993c5fa6791c577043e951154503d911ca588f60fdd311baebc7a40b5e3ae23cfc3a2217790bf19bf556fc07ceeb7a2923c7ab5c1fa7190540dcd2769536ebd553a8e9316af4e3e4e5ded2f506650a08be5b7471796f0166c3ad91f7bb856597c779375551e8d63d9da47b9cf3651174934844eca0e1ff29495f632e618e2f437e75bc0c06a3b6c251a0689d22e35334f11923b98cfa3b806d58cd41608fda5696057551150be08ec8a4d4f3a0d22cf5fdbfd38721b9b608ceac8836f3a429e3e9461c02e32031a2390db776ee38e178b849b82aec8113444c98fda5c7d9aad2d6a6a0792581e79ec3d4ebccf56e429f4a2e694b5c2974c3", &(0x7f0000000300)=""/25, 0x3, 0x1, 0x2, &(0x7f0000000440)}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FITHAW(r1, 0xc0045878) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000480)}, 0x150, 0x0, 0x1ff, 0x5, 0xfca, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669703d30784a30303030303030303030b1d702c94e7b0f050000006f6e3d3970323030302e752c766572736b6f6e3d3970323030322e752c6c6f6f73652c64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f3", 0x0, &(0x7f0000000340), 0x0) [ 1736.436980][ C1] sd 0:0:1:0: tag#4343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.444918][ T4066] [ 1736.473996][ C1] sd 0:0:1:0: tag#4343 CDB[20]: ba 17:00:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x51) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x2480, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000001400)={0x88, r4, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4000000, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x11) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x8, @unused=[0x8, 0x1a43, 0x7f, 0x1000], @subvolid=0x4}) fcntl$setstatus(r3, 0x4, 0x0) [ 1736.688413][ T4201] loop3: detected capacity change from 0 to 1054 [ 1736.698107][ C0] sd 0:0:1:0: tag#4303 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1736.704532][ T4201] EXT4-fs (loop3): bad geometry: first data block 1536 is beyond end of filesystem (512) [ 1736.707978][ C0] sd 0:0:1:0: tag#4303 CDB: opcode=0xe5 (vendor) [ 1736.724102][ C0] sd 0:0:1:0: tag#4303 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1736.733176][ C0] sd 0:0:1:0: tag#4303 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1736.742217][ C0] sd 0:0:1:0: tag#4303 CDB[20]: ba [ 1736.765543][ T4204] FAULT_INJECTION: forcing a failure. [ 1736.765543][ T4204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.778857][ T4204] CPU: 1 PID: 4204 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1736.788597][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.798683][ T4204] Call Trace: [ 1736.801954][ T4204] [ 1736.804912][ T4204] dump_stack_lvl+0xd6/0x122 [ 1736.809566][ T4204] dump_stack+0x11/0x1b [ 1736.813728][ T4204] should_fail+0x23c/0x250 [ 1736.818180][ T4204] should_fail_usercopy+0x16/0x20 [ 1736.823216][ T4204] _copy_to_user+0x1c/0x90 [ 1736.827632][ T4204] rng_dev_read+0x2bd/0x630 [ 1736.832188][ T4204] do_iter_read+0x370/0x5d0 [ 1736.836690][ T4204] do_preadv+0x159/0x240 [ 1736.840926][ T4204] __x64_sys_preadv+0x54/0x60 [ 1736.845767][ T4204] do_syscall_64+0x44/0xa0 [ 1736.850331][ T4204] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1736.856273][ T4204] RIP: 0033:0x7feb56411ae9 [ 1736.860687][ T4204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.880303][ T4204] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1736.888721][ T4204] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1736.896686][ T4204] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1736.904677][ T4204] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.912651][ T4204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.920630][ T4204] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1736.928601][ T4204] 17:00:19 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 30) 17:00:19 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x24, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)="d2995c"}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x3}, 0x4) ioctl$NS_GET_USERNS(r0, 0x40305829, 0x20000000) [ 1736.944087][ T4234] loop3: detected capacity change from 0 to 1054 [ 1736.955104][ T4234] EXT4-fs (loop3): bad geometry: first data block 1536 is beyond end of filesystem (512) 17:00:19 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x5, 0x0, 0x5, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0100001dc4d12f2a470e090f68a08d3ab2fca2a399af161c9f42592600"/39, @ANYRES16=0x0, @ANYBLOB="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"/287], 0x11c}}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x20, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/147, 0x93}]}, &(0x7f0000000f00)="4610cd5e1df2dd24486692f8c76cccae4f59bed9cfb8eb72b2463ca28a2445efee1c410d5c8e260057c9fa258bfd2dd912af8224732f69bd9f1973654bdf8064d8370194f9284ebe1921ec4e48dc02e72f645b657e91d7d54a7c5b5c1a9a5decde08dacee36459c32b50b208b4b71cfc6f99167dd23c7985731bb9857f2ac4b8d4ed9858066e4f68fda2c8d33cbed2b535de5cc9ca372fddac505c147c5c6650fccfdec59510362e6bb5655eb5d5bc5fefb1d6444bd0e566f4737c8129a971c01539953798dc8369a6ecc4a67765e1f50b53853128008d9faf28939b2a605ad072eed1da8a37cf27c22ae1441d333d60ce6184120d8cb932d0470482e9b8a0a5557e787de5e7d940fcc63617f47326280763f0108214e5c120aea4d30ee05fafcce5918c554453971d645fd6a7f2b6e80adbf7bdcba912a2b3729d6323d06c20fd2354f030a0d001d5dacc9a72f295a805d639e1f308af93ef60d1d58bc6387d2eda9bc59541f9941054d6c865f13952261185f8ead6377ac647fc09b89a009f17644eeb19f005c2ce7699268da8d3ed50beed4876590d63637bcf60d5008e3fea0bf8026f639259098a1abc93ae0fc80aedd852b6864611429802f7545b38662fc930bb5817406d978bf734d1334b6a60c7586668d80fffb17d8ebdd0e484af0d097c14bc566aff8cc206b748f5f5e64a1e6a67a35793a0ee38723df0fa6385f73d10d20a17d33f21a08c73c622663a9fc894dd5a22dfab7184e9966108b30c4fe633fd04b0dc9be6f090f36643ca18bb216c3470313ad4b91cbb3f71f7650ed9e24e0f565f49b2e586f3543e072ffcb3f67dd0140a12bfb3831160e87dacdcb8d33456d3d12cf8f981599842587588d7edb36b7e81b4abdb4df661edaae0286e681ee18611d78e44c16c8806e674134e9989c11a82ada4db41dbe5050d0cab245153e671c51826844fc9173cd8e7bda4457177934639dcd665e63556f09aeed0e4bbbcb70f497162f5a0b6af7058a800454702f7d19db3885111775f95eb2057f8205fd4b8410da17a50ca7ca39aba8d69d2474beb34164fe8d78213ae45f2b628e30078d986ff5653962813ac595337ce815ba3f07dc7b39e21b51d38e27c7335002cb9de8c8697362b60fb43fdbe5fd4175bfd914f8bc3798cbb54c1133d078dfcf66b3f59fdfe9a60d872af58346f5ef45b9b10911af9ea08dc0ddfac857b2b7362b8ed4b0e85e99a06d30fa5b43fa9e3b66bb8934da69e546779a107416d687909afd118d2103a239e54a493eb046626ea8a99b38a01e1248f5872077136a38aba62eb83837fa7db4ed79bb612825e3247ef21580786552555de75551597400b06b88cdb4931ad2e4b269043c1ff56dca593ef8a10b85efe5951b00f6f0d4e3060f3fd936b2921779e1f33833cdf454197b8e21ba48871da26ca0ae384c5856c42abde453da06aa46a30237750df8f7b9987beeac897594bea834c13891d6789d973e35d1552abd3f3e969a24243cc9b6805c9dd3d0325f4fb4580f20bc7dbe9d3b16891dc4ec931d4b04aa75e5b71f49f4efee0473571d851d3d6354f718031ff736e50b3bb855dcfff73194c4e1009ce859899bc926e80fc0e871bf59a73a6e8674854793e3791bbaa43bac362da9ce93aeaa6d2eecc7a9595b9b26dcd52757d49d44b9911f4366396886eba68b4749ec574aa37079007c4cb84776fe5b7b505191c195288dfee68ad53fd2c024bab89876d38b696270e1cf607b8b22a1e3763b66a7eced124e60540c5c35e0997104be2a1a26fac04067dac2cdfa78d332cb35cd108a0f4528816feb1c887ca36fcff89e4ba1ca3879ffb5bcb1248349a4b33a9d0304cbe380ffb5adcf413cf646a81ab1096e66763223289d589fa3b632b702146d67fb754ef709edf3a80759a2335bfe57ee1c4264c4583f63c5e863f726c78d4fd369bcb99ecfd2d296c1df3dbd4f0f0350452dc3b7b08e1ef8c824e3dc3ac121e30f3bdce7b3f0c457acab2cea47ab6d418f3cbf2e57dbe80c1515ed1072993e7a56d4ea5ec45eeee21cbc2ae108edbef45831ad14342430eeae6db172c8c10832f20a297dbd37038b618c86e21beac69c0f1dd47670ab5946b947b545b5aa03f49f1bac662c089f2bd185008c2fc6af57fb0f6b43f774737fa0293517336662521168852de18633e6106bf7a1bd4b5d88ff51aa7668b53c65fc8d53db58c642eebc9d2d3c58c9f8d129e1140de2233e0e8abbd9261ab6a4c026200c45d7f3e7cbf07de0242650c11693f7dfbe4523ceb5ff0917aba7b81630006e1ddce1305231f4b69917d68fa461ced02d9f92b639d958fe7b61d3811b647d4a7cd4fb74d0688af25cf25e4aa2433591db7428c8a4f2156e7b913fc32170d56b386800c0b9223e224a0a32f251cdb3345fe1f0609db1c16469f78c37a3d5fa1fcc1217fdf8faacae0e9d0b65b905cfaefa99dc425cd169da09ea562ee65d32abfb0d5691325a8f88299f2aac478f74531658f4500732d156b505c1c72f7c00f8ece529748030673e7594bc7e6029faf763116e7e19d2cb21e4c1e6290d22419bbc59437ee08616fe48255ba8980c9ab735ec423c51bc513d7eec9cc4552b730d575f748a002b10d91c2d2276fc85599734ba7ff21ad29c40e5caf6f44b39e9c6b3157b55adddfb179a8796b43092d3703e166b2ce21c7a6eb65ed487b427bb7383582ca5baf5ccd9fe211f92d2585ab3e2878604e346decd25859fa6ea46096858ed98963090776465758f237b28ca87ae845668bed57492e69239a6c83a31aa5b276f4034077e8b0339da5ece65b537dd0b112b4e3e187065bf2b2a6e813ab37b256afe255c0d46b1cddb2a8692f86f8632b8c3e2b1974eb6816b02a85c95516398e232ca6e07cba58954a0a94c282be9f5c2e868d8620452a9c8fd5d1e97bc6a2bd276b10bece49f91f8e9b47ebec88dc8440a1aff93fb64b8c0a4ef4154500cfb865620f0c80da3aaf53bf026b08399872613e1fb3a8c2d13a1a5e6acae8ebe6820d2442c4b117ec7512ada6b95e1786060c8ee9d2fa59e034cc32a3d10374b96ecbe1baeb997ab0f28cd58ee18df71758b6aa445b195f018e7b452f8786709ca8b7dc0e3b4cef14bd650bd7e4de9269e01675c2fa99f100d3da5637b96e8548fc4b8aaa38c1daabd21ee08870a5f39fded99299d05e9fcd6baf5c34ba0321cc88ff193d9207572b409cd7d94230637a3fe1fe04aca78d7f190fc9b6c0e20c7970361f610d3e148e983bcd06b90f53363f98ff49bc271c331b0f886a36be44df1e3bbd3158670a16e1f81f32cbd8256367e2f481ae5e6def5c0ef36f71ab9d5e4697664aa77bd8a9f55083453a46aa8f14b9d88f2478d03656224a7f11f9d68b2fba6444939a020d98211cfe19411a02ce64ab51f5e2fe354f05e5d1c07523abbdf414ef58b67caf9abd4dfb4e456138dc33e7a6cec388447d37de8dbeb602ef60f9b95c52eddc3228fe449bc9fbd2179bc96506d24aa99e830218aa734f0fe91e3bf3547473416a6b16e4846ebc4fecfbca6d51512327c7f44e615c3fa9db76693a89ee666f41b0c699d4e2dff92c9a2cd6338629645fb025ae413870c7bf3c03a2eb067af2ffe67250c2565e3acb52dffb2377aa3ca8382904bf70215fc2ca2b43d876326c5ab9d908f6e3bdb48ff5f2d31e9fb85ec3fcc887e132dd028b7b124938b4551a7b4ba1057723f56a0ec8ea84c27fbe92e4ef5a20d64c9b518039b34160b80bdfd0668061b60d02d09832bab647eb65d9c59e9c6ef2057adfe3d729397569203edc1ec4eb4cd1be4852a7eb5fa40e2e0f0209b9e9b262404e141a9d3e42f426a8fd38973d394995f84f74509e196d0514be164c87680f83b4e15425c00c29b7ea371eb131a9d2088bd615f6ad24c64fce5476379db9b587e275bdb8dc8458ebcbd41954c9dc42e937c1342d147ee407c671d02c0cc85c684f95d45109e56fd319791d153185251602309f527864e59f6cf2d2c1c9877bc4e482c79d69a55c3985e77b560a8d301615fea0a4bddca8d5d13ac668353cb1e7df8117f50b10b1a7108a0399a0602363417ccb5d114ee45ce399945b6abb380602e37fff0ae5d0bdd2217c2a27278f5cef88bfd2b28b1de02713eb7508cbedcb46afb76e78e7a05270efa697bca0bdde9f434aba1dba23c88d2d382cb85abe7c5ca6993f51a94b8a07b8f75a3c2feda9ebde29d476ce676cf6df545ae2bc4b436b847e2fb5e3ad0807225637698681509eb6afb9d011010cb6208624970369482c36930a0b9c7d7dcb7dee33849908fbe91b52f19f82531b740f525033569bf9ec27212de671d1d1e4f999ce71a791573a67319db60fb8b97cb8fd1f2edcf97526eb4fda45cdd959e1d65ee8a54ef63814d07d910bbbf780604ddcc9b866cdd9f28c68da2eac43181682015f3d171baa1379aeee29923a1606c0b0b1dbd8d0ea237d806d4818c9d65bca0ce51dc11a72d154c37a2382900c660a4b80ea9849ef1ebab303aa29bd8a3ae1ecf36cec89a15b3ca18a8c17a0ff156db82e78ef7ec06a1b5694f3d2103d43d9ce3ea4db4f288b24911d02d167de6ef612183189cb3e2925926a342fda473c5c5fb511efbe1bdb9d3e3477a04886cda5bfc52a6f00613476dfe92e39323fe8d5e5717168c2b19ad422f2ae19cb8d7fd537d8e6e7da560f03b9913493a8fb18aca78f8a7cec94486077bf475376e68ffa462036802b46388f8cf1a9e0c7a2f19b692fc801e4854b3be1fcff0c1ca7ad570dfca25bd6d8aed2885a1663a6c2557aa1a5a6fb50059a27b97d5913b40989e7ae0d2799806b40e7cab7d49865538f24d5e23701efd21bc2d0f9d22db735c92e8bd56c9986fef598f22d207fbb16f3e161550e1aaf5eedbf5f71df53ff8ec4004a222f1dd368227331ac9b3dbfb0891807588e9b53bf3d357868e3d72ef3d6d83439f9dce2510c0a249b03d28f3900ea213a3fc1e6bbc6e9f745f6510f025a28d26881febb05cb920bb61c17f3b975743c7b65e74e9fa57f30fda45101c06d21019dcc2fe51e573313749bfaa3d345772f7407d390c63539d72f5f9b009fda6d068a4cd5c05718c7902da2f45b7d08e632afa6b8d1cafce8485c03abec7ec377c00132324911bcdf46ed997d89e8249c8b9295aa56bff300c328dc697e1bd2a7cbd4fc42f43c2cbc559fef2be4980223b520b5b9f0bad2718581c78c52e20b8d4304be317615be6b9d16c6ac87990b2716302362d29acf732afde817001c63cfaa1abbdbf3a1eb56998d1e226c1511c55f88394bc8e7e2d1625a3fd553c5703acae2315e86763dbea3c080acae8abde2bd52fb144fb3a6cf84471d94def5444b6b0bd289b0047579eca26fb3db49e4471b3f550ba016416c1d98cebc1608262ea2b56ae4a8b9bafb1324d0b48e45993c5fa6791c577043e951154503d911ca588f60fdd311baebc7a40b5e3ae23cfc3a2217790bf19bf556fc07ceeb7a2923c7ab5c1fa7190540dcd2769536ebd553a8e9316af4e3e4e5ded2f506650a08be5b7471796f0166c3ad91f7bb856597c779375551e8d63d9da47b9cf3651174934844eca0e1ff29495f632e618e2f437e75bc0c06a3b6c251a0689d22e35334f11923b98cfa3b806d58cd41608fda5696057551150be08ec8a4d4f3a0d22cf5fdbfd38721b9b608ceac8836f3a429e3e9461c02e32031a2390db776ee38e178b849b82aec8113444c98fda5c7d9aad2d6a6a0792581e79ec3d4ebccf56e429f4a2e694b5c2974c3", &(0x7f0000000300)=""/25, 0x3, 0x1, 0x2, &(0x7f0000000440)}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FITHAW(r1, 0xc0045878) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000480)}, 0x150, 0x0, 0x1ff, 0x5, 0xfca, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669703d30784a30303030303030303030b1d702c94e7b0f050000006f6e3d3970323030302e752c766572736b6f6e3d3970323030322e752c6c6f6f73652c64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f3", 0x0, &(0x7f0000000340), 0x0) 17:00:19 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000040600000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1736.989766][ T4327] loop4: detected capacity change from 0 to 1054 [ 1737.015358][ T4327] EXT4-fs (loop4): Invalid log block size: 1280 17:00:19 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000006000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1737.062811][ T4335] loop4: detected capacity change from 0 to 1054 [ 1737.070653][ T4335] EXT4-fs (loop4): Invalid log block size: 1280 [ 1737.191661][ T4345] FAULT_INJECTION: forcing a failure. [ 1737.191661][ T4345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.205107][ T4345] CPU: 1 PID: 4345 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1737.214883][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.224935][ T4345] Call Trace: [ 1737.228269][ T4345] [ 1737.231388][ T4345] dump_stack_lvl+0xd6/0x122 [ 1737.235994][ T4345] dump_stack+0x11/0x1b [ 1737.240151][ T4345] should_fail+0x23c/0x250 [ 1737.244589][ T4345] should_fail_usercopy+0x16/0x20 [ 1737.249689][ T4345] _copy_to_user+0x1c/0x90 [ 1737.254132][ T4345] rng_dev_read+0x2bd/0x630 [ 1737.258661][ T4345] do_iter_read+0x370/0x5d0 [ 1737.263161][ T4345] do_preadv+0x159/0x240 [ 1737.267405][ T4345] __x64_sys_preadv+0x54/0x60 [ 1737.272082][ T4345] do_syscall_64+0x44/0xa0 [ 1737.276563][ T4345] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1737.282466][ T4345] RIP: 0033:0x7feb56411ae9 [ 1737.287041][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.306652][ T4345] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1737.315086][ T4345] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1737.323074][ T4345] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1737.331079][ T4345] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.339052][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.347024][ T4345] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1737.355096][ T4345] [ 1737.368409][ T4199] ================================================================== [ 1737.376498][ T4199] BUG: KCSAN: data-race in random_recv_done / virtio_read [ 1737.383610][ T4199] [ 1737.385948][ T4199] write to 0xffff888100a7f0cc of 4 bytes by interrupt on cpu 1: [ 1737.393569][ T4199] random_recv_done+0x58/0x80 [ 1737.398237][ T4199] vring_interrupt+0x15d/0x180 [ 1737.403009][ T4199] __handle_irq_event_percpu+0x93/0x480 [ 1737.408561][ T4199] handle_irq_event+0x9a/0x150 [ 1737.413329][ T4199] handle_edge_irq+0x18e/0x5f0 [ 1737.418088][ T4199] __common_interrupt+0x60/0x100 [ 1737.423020][ T4199] common_interrupt+0x45/0xc0 [ 1737.427690][ T4199] asm_common_interrupt+0x1e/0x40 [ 1737.432709][ T4199] [ 1737.435028][ T4199] write to 0xffff888100a7f0cc of 4 bytes by task 4199 on cpu 0: [ 1737.442648][ T4199] virtio_read+0x1a0/0x450 [ 1737.447059][ T4199] rng_dev_read+0x1b4/0x630 [ 1737.451563][ T4199] do_iter_read+0x370/0x5d0 [ 1737.456084][ T4199] do_preadv+0x159/0x240 [ 1737.460321][ T4199] __x64_sys_preadv+0x54/0x60 [ 1737.464990][ T4199] do_syscall_64+0x44/0xa0 [ 1737.469406][ T4199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1737.475292][ T4199] [ 1737.477600][ T4199] value changed: 0x00000040 -> 0x00000000 [ 1737.483304][ T4199] [ 1737.485613][ T4199] Reported by Kernel Concurrency Sanitizer on: 17:00:20 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 31) [ 1737.491748][ T4199] CPU: 0 PID: 4199 Comm: syz-executor.1 Tainted: G W 5.15.0-syzkaller #0 [ 1737.501455][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.511506][ T4199] ================================================================== 17:00:20 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000780)={{r2}, 0x0, 0x6, @unused=[0xffffffffffffa81f, 0x20, 0x10000, 0x4], @devid}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=r2], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) 17:00:20 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1737.568228][ T4450] loop3: detected capacity change from 0 to 1054 [ 1737.583239][ T4450] EXT4-fs (loop3): bad geometry: first data block 1540 is beyond end of filesystem (512) [ 1737.584293][ C1] sd 0:0:1:0: tag#4296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1737.602901][ C1] sd 0:0:1:0: tag#4296 CDB: opcode=0xe5 (vendor) [ 1737.609257][ C1] sd 0:0:1:0: tag#4296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1737.618297][ C1] sd 0:0:1:0: tag#4296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1737.627323][ C1] sd 0:0:1:0: tag#4296 CDB[20]: ba [ 1737.652727][ T4457] loop3: detected capacity change from 0 to 1054 17:00:20 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x5, 0x0, 0x5, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0100001dc4d12f2a470e090f68a08d3ab2fca2a399af161c9f42592600"/39, @ANYRES16=0x0, @ANYBLOB="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"/287], 0x11c}}, 0x4000004) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SG_IO(r2, 0x2285, &(0x7f00000006c0)={0x0, 0x0, 0x1000, 0x20, @scatter={0x1, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/147, 0x93}]}, &(0x7f0000000f00)="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", &(0x7f0000000300)=""/25, 0x3, 0x1, 0x2, &(0x7f0000000440)}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) open_tree(r0, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$FITHAW(r1, 0xc0045878) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x1, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000480)}, 0x150, 0x0, 0x1ff, 0x5, 0xfca, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c616669703d30784a30303030303030303030b1d702c94e7b0f050000006f6e3d3970323030302e752c766572736b6f6e3d3970323030322e752c6c6f6f73652c64666c747569643d", @ANYRESHEX=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2000000, &(0x7f00000005c0)="8afa1d81c6d3cb48ed2400dbef65f5a98af686103b111061193faa06d8e28f62bb4cbb6c7503ea2afefb47934bc3287db6db7a782c34a07f7dca206d5b8e1881d52b5091eb86b7863bd8d256e2f3", 0x0, &(0x7f0000000340), 0x0) [ 1737.664572][ T4457] EXT4-fs (loop3): bad geometry: first data block 1540 is beyond end of filesystem (512) 17:00:20 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000700000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1737.727825][ T4469] loop4: detected capacity change from 0 to 1054 [ 1737.758505][ T4469] EXT4-fs (loop4): Invalid log block size: 1536 [ 1737.792210][ T4476] loop4: detected capacity change from 0 to 1054 [ 1737.800386][ T4476] EXT4-fs (loop4): Invalid log block size: 1536 [ 1737.841558][ T4483] FAULT_INJECTION: forcing a failure. [ 1737.841558][ T4483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.854953][ T4483] CPU: 1 PID: 4483 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1737.864672][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.874717][ T4483] Call Trace: [ 1737.878027][ T4483] [ 1737.880954][ T4483] dump_stack_lvl+0xd6/0x122 [ 1737.885617][ T4483] dump_stack+0x11/0x1b [ 1737.889776][ T4483] should_fail+0x23c/0x250 [ 1737.894234][ T4483] should_fail_usercopy+0x16/0x20 [ 1737.899340][ T4483] _copy_to_user+0x1c/0x90 [ 1737.903901][ T4483] rng_dev_read+0x2bd/0x630 [ 1737.908484][ T4483] do_iter_read+0x370/0x5d0 [ 1737.913095][ T4483] do_preadv+0x159/0x240 [ 1737.917338][ T4483] __x64_sys_preadv+0x54/0x60 [ 1737.922030][ T4483] do_syscall_64+0x44/0xa0 [ 1737.926576][ T4483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1737.932476][ T4483] RIP: 0033:0x7feb56411ae9 [ 1737.936945][ T4483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.956666][ T4483] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1737.965108][ T4483] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1737.973087][ T4483] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1737.981074][ T4483] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:20 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000406000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:20 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 32) [ 1737.989043][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.997029][ T4483] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1738.005124][ T4483] 17:00:20 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:20 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0xfff}, {0x1000, 0xfb0f}]}, 0x14, 0x0) ftruncate(r0, 0x208200) mmap(&(0x7f00001f2000/0x4000)=nil, 0x4000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r3 = syz_io_uring_complete(0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) sendfile(r2, r2, 0x0, 0xffffdffa) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='\x00', 0x400000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 1738.134156][ C1] sd 0:0:1:0: tag#4296 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1738.144105][ C1] sd 0:0:1:0: tag#4296 CDB: opcode=0xe5 (vendor) [ 1738.150468][ C1] sd 0:0:1:0: tag#4296 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1738.159513][ C1] sd 0:0:1:0: tag#4296 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1738.168575][ C1] sd 0:0:1:0: tag#4296 CDB[20]: ba [ 1738.218485][ T4604] loop3: detected capacity change from 0 to 1054 [ 1738.238944][ T4604] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (512) 17:00:21 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00ffffee0700000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1738.281692][ T4610] loop3: detected capacity change from 0 to 1054 [ 1738.288904][ T4610] EXT4-fs (loop3): bad geometry: first data block 1792 is beyond end of filesystem (512) [ 1738.356498][ T4623] loop4: detected capacity change from 0 to 1054 [ 1738.375715][ T4623] EXT4-fs (loop4): Invalid log block size: 1540 [ 1738.400996][ T4625] FAULT_INJECTION: forcing a failure. [ 1738.400996][ T4625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.414313][ T4625] CPU: 1 PID: 4625 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1738.424036][ T4625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.434271][ T4625] Call Trace: [ 1738.437545][ T4625] [ 1738.440474][ T4625] dump_stack_lvl+0xd6/0x122 [ 1738.445079][ T4625] dump_stack+0x11/0x1b [ 1738.449235][ T4625] should_fail+0x23c/0x250 [ 1738.453651][ T4625] should_fail_usercopy+0x16/0x20 [ 1738.458760][ T4625] _copy_to_user+0x1c/0x90 [ 1738.463244][ T4625] rng_dev_read+0x2bd/0x630 [ 1738.467757][ T4625] do_iter_read+0x370/0x5d0 [ 1738.472261][ T4625] do_preadv+0x159/0x240 [ 1738.476507][ T4625] __x64_sys_preadv+0x54/0x60 [ 1738.481186][ T4625] do_syscall_64+0x44/0xa0 [ 1738.485609][ T4625] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1738.491535][ T4625] RIP: 0033:0x7feb56411ae9 [ 1738.495948][ T4625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1738.515590][ T4625] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1738.524025][ T4625] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1738.531989][ T4625] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1738.540029][ T4625] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1738.548010][ T4625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 17:00:21 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 33) [ 1738.555974][ T4625] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1738.563972][ T4625] [ 1738.571281][ T4631] loop4: detected capacity change from 0 to 1054 [ 1738.578355][ T4631] EXT4-fs (loop4): Invalid log block size: 1540 17:00:21 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:21 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000007000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1738.609547][ C0] sd 0:0:1:0: tag#4327 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1738.619408][ C0] sd 0:0:1:0: tag#4327 CDB: opcode=0xe5 (vendor) [ 1738.625756][ C0] sd 0:0:1:0: tag#4327 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1738.634794][ C0] sd 0:0:1:0: tag#4327 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1738.643837][ C0] sd 0:0:1:0: tag#4327 CDB[20]: ba [ 1738.756511][ T4640] loop3: detected capacity change from 0 to 1054 [ 1738.776926][ T4640] EXT4-fs (loop3): bad geometry: first data block 2030 is beyond end of filesystem (512) [ 1738.832934][ T4647] loop3: detected capacity change from 0 to 1054 [ 1738.848412][ T4647] EXT4-fs (loop3): bad geometry: first data block 2030 is beyond end of filesystem (512) [ 1738.890305][ T4653] FAULT_INJECTION: forcing a failure. [ 1738.890305][ T4653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.903602][ T4653] CPU: 1 PID: 4653 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1738.913319][ T4653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1738.923386][ T4653] Call Trace: [ 1738.926693][ T4653] [ 1738.929616][ T4653] dump_stack_lvl+0xd6/0x122 [ 1738.934283][ T4653] dump_stack+0x11/0x1b [ 1738.938490][ T4653] should_fail+0x23c/0x250 [ 1738.942980][ T4653] should_fail_usercopy+0x16/0x20 [ 1738.948015][ T4653] _copy_to_user+0x1c/0x90 [ 1738.952428][ T4653] rng_dev_read+0x2bd/0x630 [ 1738.956959][ T4653] do_iter_read+0x370/0x5d0 [ 1738.961533][ T4653] do_preadv+0x159/0x240 [ 1738.965802][ T4653] __x64_sys_preadv+0x54/0x60 [ 1738.970480][ T4653] do_syscall_64+0x44/0xa0 [ 1738.974940][ T4653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1738.980828][ T4653] RIP: 0033:0x7feb56411ae9 [ 1738.985244][ T4653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.005022][ T4653] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1739.013440][ T4653] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1739.021415][ T4653] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1739.029398][ T4653] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:21 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 34) 17:00:21 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000800000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1739.037391][ T4653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.045374][ T4653] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1739.053357][ T4653] [ 1739.080645][ T4759] loop4: detected capacity change from 0 to 1054 17:00:21 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1739.112316][ T4759] EXT4-fs (loop4): Invalid log block size: 1792 [ 1739.142069][ T4765] loop4: detected capacity change from 0 to 1054 [ 1739.153225][ T4765] EXT4-fs (loop4): Invalid log block size: 1792 17:00:21 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f0000000000ffffee07000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:21 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1739.248334][ C1] sd 0:0:1:0: tag#4307 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1739.258193][ C1] sd 0:0:1:0: tag#4307 CDB: opcode=0xe5 (vendor) [ 1739.264545][ C1] sd 0:0:1:0: tag#4307 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1739.273579][ C1] sd 0:0:1:0: tag#4307 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1739.282731][ C1] sd 0:0:1:0: tag#4307 CDB[20]: ba [ 1739.293666][ T4775] loop3: detected capacity change from 0 to 1054 [ 1739.313377][ T4775] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (512) [ 1739.339973][ T4776] FAULT_INJECTION: forcing a failure. [ 1739.339973][ T4776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.353427][ T4776] CPU: 1 PID: 4776 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1739.363204][ T4776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.373262][ T4776] Call Trace: [ 1739.376534][ T4776] [ 1739.379457][ T4776] dump_stack_lvl+0xd6/0x122 [ 1739.384058][ T4776] dump_stack+0x11/0x1b [ 1739.388203][ T4776] should_fail+0x23c/0x250 [ 1739.392621][ T4776] should_fail_usercopy+0x16/0x20 [ 1739.397648][ T4776] _copy_to_user+0x1c/0x90 [ 1739.402124][ T4776] rng_dev_read+0x2bd/0x630 [ 1739.406633][ T4776] do_iter_read+0x370/0x5d0 [ 1739.411172][ T4776] do_preadv+0x159/0x240 [ 1739.415414][ T4776] __x64_sys_preadv+0x54/0x60 [ 1739.420094][ T4776] do_syscall_64+0x44/0xa0 [ 1739.424570][ T4776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1739.430590][ T4776] RIP: 0033:0x7feb56411ae9 [ 1739.434996][ T4776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1739.454610][ T4776] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1739.463105][ T4776] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1739.471070][ T4776] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1739.479100][ T4776] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:22 executing program 0: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x610008cf) r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) getrlimit(0x6, &(0x7f0000000480)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x0, 0x800}, {0x0, 0x8}]}, 0x14, 0x0) r4 = fsmount(r0, 0x0, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r2, 0xd5cd, 0x356, 0x5}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x1f, 0x9, 0x8, 0x0, 0x0, 0x576, 0x540, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0xffff}, 0x1008, 0x9, 0x1, 0x1, 0x7fffffff, 0x3, 0xff, 0x0, 0x8001, 0x0, 0x6}, 0x0, 0xf, r5, 0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x6, 0x1}) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 17:00:22 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 35) 17:00:22 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000900000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1739.487088][ T4776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1739.495052][ T4776] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1739.503028][ T4776] [ 1739.509218][ T4783] loop3: detected capacity change from 0 to 1054 [ 1739.516571][ T4783] EXT4-fs (loop3): bad geometry: first data block 2048 is beyond end of filesystem (512) [ 1739.695843][ T4795] loop4: detected capacity change from 0 to 1054 [ 1739.731071][ T4795] EXT4-fs (loop4): Invalid log block size: 2030 [ 1739.778069][ T4804] loop4: detected capacity change from 0 to 1054 [ 1739.791816][ T4804] EXT4-fs (loop4): Invalid log block size: 2030 17:00:22 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000008000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1739.871072][ T4811] FAULT_INJECTION: forcing a failure. [ 1739.871072][ T4811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.884331][ T4811] CPU: 1 PID: 4811 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1739.894135][ T4811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.904258][ T4811] Call Trace: [ 1739.907534][ T4811] [ 1739.910511][ T4811] dump_stack_lvl+0xd6/0x122 [ 1739.915187][ T4811] dump_stack+0x11/0x1b [ 1739.919208][ C0] sd 0:0:1:0: tag#4295 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1739.919352][ T4811] should_fail+0x23c/0x250 [ 1739.929187][ C0] sd 0:0:1:0: tag#4295 CDB: opcode=0xe5 (vendor) [ 1739.933567][ T4811] should_fail_usercopy+0x16/0x20 [ 1739.933598][ T4811] _copy_to_user+0x1c/0x90 [ 1739.939913][ C0] sd 0:0:1:0: tag#4295 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1739.944912][ T4811] rng_dev_read+0x2bd/0x630 [ 1739.949756][ C0] sd 0:0:1:0: tag#4295 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1739.958829][ T4811] do_iter_read+0x370/0x5d0 [ 1739.963369][ C0] sd 0:0:1:0: tag#4295 CDB[20]: ba [ 1739.972344][ T4811] do_preadv+0x159/0x240 [ 1739.972371][ T4811] __x64_sys_preadv+0x54/0x60 [ 1739.990797][ T4811] do_syscall_64+0x44/0xa0 [ 1739.995235][ T4811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1740.001133][ T4811] RIP: 0033:0x7feb56411ae9 [ 1740.005622][ T4811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.025329][ T4811] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1740.033766][ T4811] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1740.041774][ T4811] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1740.049755][ T4811] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.057724][ T4811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.065692][ T4811] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1740.073715][ T4811] [ 1740.088770][ C0] sd 0:0:1:0: tag#4304 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1740.098612][ C0] sd 0:0:1:0: tag#4304 CDB: opcode=0xe5 (vendor) [ 1740.104946][ C0] sd 0:0:1:0: tag#4304 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 17:00:22 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 36) 17:00:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0, 0xc}, 0x2245, 0x0, 0x0, 0x0, 0x401, 0x40040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1ca40000, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) clone(0x408c0400, &(0x7f00000001c0)="cfdd4a4edbd81dee6d2ce553bef302f6fe45d626fe126a4491328552c736c8d9d1507d91fd1caebc006a42b9c4c07f8591d178f9c5cbc5447cf002f2c1d6c2ae8924d7e146edd9a7cae789eb220a51a168c6f93f356b4d9d06cae21c5a7aa21d5ffeacf59c1cc197920429b3cb8441ec2e34f449f3f87a4f7e70739be21407bb8cff19fb722e4f4f8e6a9551184b5c2d26879232641d2b36c565ed4f19b0", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1952b2fdcf581ea11c814225783666b5e7149a181da87941e5d30ffc36852ac9cb03dfc825a1efddcdc56b2a9c701624abff3c830eed2ab2c41fb4bce378e41a6fb18b0ec97e14e5cbbe70cea7aff3b19a9db882ab1afe5529abdc150ab214ca4b577bee6c3a52c3edfd90fda6fced7ab1ea89ce4dfff6a1b32c0ceb3abdbce3d02a7f55f2f0bb63e72c751773f6e56b6be4cf71a1a19c3c72bd1945549df9c90db4d20c5f2ab43dbe91d2e009f507044047b10290c730be3da555c1275d676f2ed0e7f522d2f58049e63288151bfa4d79f90c67b5f3cbad3bfe32af3487a147e757c92ee7e6f1f151249a4b8ecb3f901c232e01ac16dba8dc49aa3b1acf5704ea48a26adcb243e025917ebd01d2e4824124cba9223f6ed9faa940561db5f9f70b93e300b40374741d7ec9b9cde4c732e75eea6ec058233309d05574217d322714e071b17d81a89de33e96c34ee0ae628e8b0d9b5cd106cfd38e152a9f7b1a6bcc73b3aab97d42d4bd6a6de7d9a5b904151a86d9a957aa5ba0ddadfdfae0e323b9e9757507f8df1922677c2a893d66fbd9fc37272f0a965338eb6d3a658c5d45fca0f8c66ed8e025e6f131449b5770815cd817a25ecc898925b88c71afe64055df1865a06fbcac847d30a84bc06c338d6d403a2b86545748487faf0b5a65998b4a95a8c86720368472fb7eb84006009a0db31c0eabd7e9e3b227e748d4b2a320d60afcd5cc94a0c7cbe79a4ca4e0c8973a55963f71a695603ba0349c1cff7fd91e5ee5633c276822a47feb2d8552aa42ea030d337f25770f5731858545ccfec2a516ae39fd2bee744c542c839ba90f658b310ca876e36ff8b69387f8a94a0dc7b54189dcf37b72235016b38e6006310180678cd05232be28a7cd66a46c036f8508f5e2ac7b983478200b07496d10048e23f66c846332aaa439d6245fa26e57d5ac650a01a644f06211a8b914e9593df7e2b422a4e16c2d09d0c2063bf7af21bcd8d8c684ddb08f7686b5b5336d9d61f23f69e7b3a0665d60b0891ce2097d5003b8ed962c1c42b83f75bd96220240d004701a07496a035ca9418b41d2563acf0d4fe0c07b385f14a7758508f03edbb6e367880c8c9dfc52dd6c20a8c2a90b4ff668214bb9126727de476d2849b8164cf8d32ac59b5707d5a321d72e1fb52699929ab432f51a7016c934f17d1451845d1be5d4185a50d8d4cbbef7904752f3aef9ae2d9ce95abac49489355188cb8dcc4feb80ebac1c62546dcd916dd0445afe3c95646741d4c7a7dba671863489343656e3f264a3049ecc3e48768029c69f37186f95a7ea050bd08ee2cf9a724050d1e661ba0067d2ac13c4f027d3599004c40a6b965fdc222441eb743eaadfe1b0b337d65fb26fdb880b2f5334b2af1350c01bdbb5deefab807f80c82cb4a52070782900f014c537b395f12ae2f8fcaf5f85cca469e075214a29429a73d0dc2ac6bb2ce567821e48c1e8396002f6b8d77f3196fccd287b494a80d00e146c682fdd99bd37a24dd20e69af6f5df67983ae51a2978e7bf32dbb8d8c479f9f906f26b5c1a646b7c2ddcc0354c9f11c3a51c6f4a43325e2aae4eff0a09fb2594335281a8ae84f446d0d8ff01aff34bed26d884a66ebaed1e428d38485f9ecb8bff222ee9de840a397e7664cd7ff0d2cf7cc0187f7dc6d922b61cff212189375f91cd2d605c24a7b3d1dcd740387226ac843bd4e178628eb96f4e244d064daa3b53460c2054571f767b10fe04ce8b9dbe317e25035bc2db80b2d0810002b3b5b7e1fc017dfe411483a42215624b857ec8c56147846248f0af1ba0a2715a799e4f7e155ec576781c70ec2e14f54f905a0afc78b4c829305abeb60ced7376fef1535645539727100e480c9e1a7aa315a2af775e57fe051aacdcf6a14c6a9252df3197bc37f5613b295c45e311737ced3e071e6a9f5c211870633fa3de1abca4ef90d792c7dd70cbb316f47e141ce0cc05a1bed407811f20a9afe7f74b7ce616d5d078a84d5433916746c3b2fa828a6d11bd87419bc81389c7298b2577d150cf08a4148515ea3ddb085ed7c3aa3bed00f23bc4b0f80cfb3f0e66498d791098dbc73f393d08a9d03071397b35637b19df64873f98f5eff9aa9d9383b79b6bcf35a400f6c4b18a719ae915b0fcbd44f49a2bc8444bff8304e79b8323f4df1e40788f15fcda6e55fa7df8f72c3671eec05ce6d3e87e61af7c2fde1a430e7233bc838af8091783f8358f3b71bc7e8d9078aa3a2c549b516544e26ded32c496027735e0ed017e65da9e041bf93071da9b7d40725f0c8db484cfb7d920ae6a95a5ad142a4bd9bac6522a87809257bbb261a0bcd45b2e5f95d14d4d9e4adb8916112dd212cc34acad9354995586c0ce924272b57e6e0b6dc276dd1b50aa127c8bcf0c845618afe29db62c7ef5e4f64b5ac4607282bdc073cf592c8bf5a69dc6cda4370295359e4669a691ff85ef4f488f2913e4b8fe17bdd37754bd4eb3b6a37db319e56b53b96e82c463f3e41c09f8850b5ca20510d11f443f515abdaf22a02ddece2be9bd8561ac5bb7acab6d600b45178067150351c1bbe6b8793768355083882c6a983a19e49eb5f68b96592b311340bf4a31cc762e1aefbb111fee423d8e90543e622c1866094fa65966021f4826d197f60eb64e5902c8239eb327a9e2e335051b8fe0745b532b0cec28b55ec35fd546072f16b49e72ef92854646af353f2950a2102a9081e6bcf14b85aad8e5f3c936c0819a2a8caab2be01765c281d39349541f7062a435323b1f667a68d33fff8bc3a9b74734f4ecede9ce22598c456077950136a4088514024dfa2ea24a1d3ae703cb4540995d788d74b9f6de69ac5653fe9b5319665121718bbf41266b13608202b92e2954526965e3b1d6f3181c9e5ca65461995e709720a59a98562dcec0aefc067ae7e8d7ea79ac602e4fae91bddf357964e305a6b9c1729a2a29da8db9d5780e1c7d30fc48860841f2a10c69cd286535b388137b89c8aa426c0eb0f72732a8006a66817e90e2741ec9a06fe66675a171bfb80bcaefd461c85ef6e1bc1b381fbff786ed60acf4aeaf66bc3c0f70c58d10f382e4886b87ecdf6f2b53cd5a7d39ace74c5e1e72b9f5f38c86f6ef87b0f17bd9318806748b6ca0ab6ce02a8b67517a0f393dec812db8b27160112e9ad1cd676653f39a179566f3f39d14b2606c44dab31b9d6699e8dc32a7e734ac301808308e900a7393c123cc2603c88ed382abe47c0af68dbef326966169ef280329c763442d5330b5305442003aa8c463a585d13069d554025fe0000474c3071131d84f5f5f4d834109710b5523d7a022fb2bc55be0c13c1c05965ed69561b6be572b2e4ab3655d4388c44a0291295c1f9748b642c47c56709e74843597118ee40af044d8c181473a0bac2af5c955c05f6ce6f1a6dcd4c9367667d74cb4fe193fe1e1a26195d0d9bf14ae13421acd711b6569a9d7556493841c98eac493033cd39e635b6e6dacf319d8505614810964080710dcdfbec1b489ad779f1a499b137bdc20508155ee709d50f044085d960e83fb44bfd3af3a22933fe9ca5ee7f007486a8e4784bb3a0936aea137e0364771409c2022d2375bb59f73d8898fa8d65bd727a11c47213f28c8de59a0fe35a9efb4c6d27faa7822401d9fff779b8d80093cf8a7bb7639efe956505a0fa24e92feef15fc1e8ff9bcc611b5c368e9becf2ef421977fdec131e2aea8c5d78442a8c138c0115a579e05cec227399b3d1aadc7b9c6ecaa4fa034137716390ddb6265d23de0106b2bc1986cc0e66bdb79a35b13a095e64bd4ab838e8ba91192012641b8efb7f0fe1f91911960c856a0b44e849b99809a1c31ead1ee5b2e5f05f8748a2b6e7b9ecec2f0ec3dd58df719f783676fd9a978d095ea88b089eb76d595fc05b64c9a9c17d76fb59a644bff5700446c07d4100b3742b838a6aa7f1f59f6b1b44b8582177693e2daacc32ba12dbdd725cf213117f9535b3dd0410b1483f66fd361c329a1b155850dc1568190cb010f6443c1812e38d29e1239d68392f214b03fe17680d35ad614a088d2338301f6d7fbc216f8468bae9a6d4f873582ea6bb24ca2b09f051489d54ef0d5d43e2740746aaceb00245587abcfbaff176a39d6e6df116d3e981d1325f4377358163d829e6a7703152f70cb7945d97531f1c1ff51437e0fcb5a412c95e89f932107e82762dc00101be63ab285efd5a125125831ddaaa333e137dce1ae41428dcfb3949c09026f355fbf778f4437274882b8ece34d44c7dcc09b1ead6ab4be27f0c3c28a941645982d3dfdada74875ae135e4171ceb5886d3ebae38da74bbcc2426ae3ecf9ed88eae8dd85e440d6f3851382b6afc63c2ed6310ef7b7140fc67db8aa2ecc92824e3ee379230643f5aa1146c59828971ee73f054101e80dc0a679c04ef1da05b7874c05c85716101ed637736a63383d483b5f361a18c209500cc35fbe1192420d24ca52bc4c35c8fd17cf2f753c5ce9631e73bd7fceceaaecec59fe8e05c656f01b0a14f90e57020e4b87cd67b98c159c598d0033bf69883f568f399adb7fcf7f389fa64a39025d78964858f88c2ad02314c121753dd9b753b2fcdac05072dfa5636a208b877d16c2b858c6dc8ef701dc404f45cbeb3928b0f70eb45d328f3e60e45cc20c6fca30f83f683882c4e9cc4c05fc892c5d8f3fc1a83e05b3138ff56a4f08075beccd5f95a6eb2247625877245c0388b7a075d07eab817c2d7a39163615d74f02a4e240c599b1f48e402bd249cee9dafb5092bbde5af6109ec6dd959ff3f84a3d84b920b36a25981944a28f513c09637b5b3af0bde102d8a1273a5d0d696d772f6d74ffd99118d7e3b48065a3d04d6c0311d1438a53985ffa764cc02d24a0a1f6526ce1e4c270ecf1a3b60638669cdd6fd023f78be07e0acf5e9087d7b251d38be259d7d8c78b1123068dcc7230d7a5bbd30e514e4d6b867f3800957c0f14e576fde9a97252c96614963651f013a2023d9fac714d35106f035f2d6279df557fb596647e02262900755d83d3bc6fafb6043805b3d08b606f20aa26c5cc5c21e3c4dee27e1462ce515de4f13a999e3040e43c9a0fa123769eb6e46c5be65abcc30046e4acf8c72e396810c77ede12d6736eaf0e96ffec8974b719d44117e2fc26d7a8f8db318d6d54520f95931d0c31b32dca2b05dd76ad8f7b063e90173b25e7e85f9c10e443f5858e50ee768be39b7c6ee78184c6574ac306b04603b4e2b4c78f0a55c7ee9c9a5ef8230e6aa86c2ae2a3de5f2d875d82beddcba86d8e846b643485e141cec254e86e079cd8c337e96bec4deba9e49c274a22b6489bf03c8393f1f09c0b691d7de0c3dc2164b4f0cc94b445a8d595cc51576cdbed266dfa279b1195a2bbbdd50378299074c9bc06df893e1f1fa4d5915fc4dbf52c030b5b16faf007967e4a19e358fc4b7b4ada8e7e96209e963531113d8ea1cfc4969e03bebcc862535cc7fae9532daee6489b369f87ae396e95a4067b8c6bf84e28623ad5e2e338e007d667240c39a0e52147146b298367e7b9846f922067e105ffe226148c9ffb29c1abc898f5f2d47d63ed1ac4dc885e301abc65bf2200c867258c63329d205127461d784cd903318290d29dbcaf1822c63421e4ad3824d6b9ad5da0b667665dff1398adf59c03805afaaa98e7e7c06e769e23d19bf610a865a94230af19d9604dc53afc740afea31bec6b3ea986a5c334275f027d77570f9c4e895591c2e621268c9706b842fa23e2258d09d8976b348d2d9c3be0d3d6") clone(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) clone(0xa2026200, &(0x7f0000001300)="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", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000002300)="291b9be6915fdad2264e4cc25cc3914c42507ebe86952fe9bb639263d5a6099e05740727f40ac03fbeab2be4d50f8896bbc19785ee7825c475b52b4092dfdee72397bfb231584c9053caee97e044d85a5f52a20f83a2c64d3becb70c48db0bdbed7b02fff07c1939da3d640745d87c3b5e823ba31064a8575771e8080ac20f983aba9b857f7b2394570f0cd5fa4976ca0add28a6ad9d11ce3563ad8f6bf3bc269f0aaf13ca75a9c48a0f6d1486be1608438f3b23ec7fa70abf680efeec5736257c320e68689a6b7ffd8806c3957d201e47cf7e31b0bd9c2be2e55c521239170010414bf44f625ec0bf328015bea0da63366a0bcaf5ff1a04a505c0a7ad97b1bfdea0823e414a14f0ce0c5368640b10c5c37b3232cc6faaa717f6b6a6073d8df90247fe4e3708085778c042d5beb188ea8f1a5feee8c04c96f2d9b2cc964388b4a445966469d4612d90cf4c36ccbb6623eb337e68b1e18c54bd278b24930a041722e2ddcb32e58a0bc42e6efdb23e3fb5cf05e910133a6e7dc09f1816d463d3f7e93ef21da3f31580b6a6c42bb3fe5abbd216f07414e844ef28b0391493389d73f314aab50607c29b8dedcbfd78d2112ef3693a29362179a3a379522e2dbee2ccab37c8dcf86ec79e5f330dfc1e9760012c66d98f4a3a289d2560432456feada6f09e695bf9653f844d071cda586fbe854f6428a6358a0c89b41fadb82d28698728dc8233b12e1cb6c83f7fdfc2737aeda8078473f9d1c3bde50040a59883990bb49649e6536e14d7cf5298539316ab60ca0112e366c127005595bb1a9c5fc6d3f2515634d0fcf6db84f1ae769396fc03c7c1d7d8f1386291bb43987722b23a8f3e861a10c78bb4b2a20aeae8e824574668a1a0646162cf466e569243a3bbdc4529d72ddd1bd37a2c29eb83ee265cfa8eb981c3e096c9b78a35e1e7570a92e57d5292c821cc617897ba164819596c93fcc696232e57cd55fd8844fa13d884aefea9f6682ba54f5a54e007819807aafa414ee6dbd941a1c51e0f473c17be2d2f9abcc8eb580b6dcf80ac31353e6eccc9b884194417f90a3375e7fa9787ce15965d90fe77f31bdf4f9799213434774431ad1664006eb25939db1fd73e6b36f999f71fb66fed0d6551c145ecc4d523b8a2e0db33c7f9a4ef9af6bd2ba5aa8daa17bca215f56146c482e633d5ab79bb76c2fd3efd1b4c33eb009ce144985c0d4456dba3490019230529309d0eabfd823278fe0b71b9e77f7233cca959b1f226751e598e67efd76c69b94706b02c51f52ca66c5f89c5159d68696d06dbb81931ae119ed34fe52db5f8f748598217b41270b5d1b0d1fa7a0359b536bf463bdb245d84b5dfa3625613e2d9192cf741ac5217397d0392077b6514cd1bf3f91e55fbdaa1e47f41047ecd56227cc5d473ef1518e902b1ac3c00404f5df731e546c9760b40bccc2fce4b1ebca6c063b2f80f59e0438ac6ca28ae149582f210eb5061f35910dce5df40f9dc7af7980f2cd35c0296fbc65df846b9273602772189101ad4d05f927e448fc15fe474e7fed906fd1a4b306620cbbb2bec534e3606e08dd8a225fdead9c031cd7a50a1c8dc60235bcf8832fee228bcf9eae6c20e31deb444801c3e2d9554580c559449021e41ad4408d2d6e95aa04b559893690eddc2cbc8b0bc0098bdb5bd96119443ed5eb4514bb02db1d95fab27d665178ab28cf2f93a664d00f458cbe1c206b70c5841aa2f23007ca4ec567f08c3b8e2284770bf3be5682e5d63543170224fdf41f70776e745b2f5695a6543229b4885e0575dad2b7d81fb963b957acd0961b9e7170e7aff9f3509080653f05d261973ba2f055dc6d19407deec802ff6cdfe6fe962fa9183570bed9a5fc3c0b8819aa29806e04b44918a3231b78e49515127f7b6aea857c77fe79d88e3acc35b89cc93595be29560d412b0a9c16598bed70a3beae7583a14051dd3d3144ed92fe426b42cc09f1acc5a54697f52b55115ca5e3ca708faf5b4d7fd22fd19605d4efdfcef8a062ec3ec3aef1f8e78fe5002911a1a7a9de3883c863f72b93e96d901f18211302531f6105f900709552360c44bdc8e4827c137ef7c6cde4b0b6611b261353983b5b1f29c55991fd532534657742c722a2ff89d1031120e9abcec1a460d8ab84c47d2bf8f18f3c3943da94b71d7943fcd3ada75613eee37cd470d90f4d16217efa65e4a5524fcbabfe7aab5467008f28de626460a18e9cd85e27f87aa5be2cc8bdc5c18e77f32add11aa1c83e85d7bc1e5edb533b5aaa7334e364cb4a92a184efe894ee203e8a275a55137b0e7a457354bc0edba5b9b4563a6f8c8e46d36c8c2efbd3a89c085e2eb0b8f38fd20c5e1d4c3ced7276cff04f2fdd4bfc0b3d0061b3c8910b1088a85cb57b5df01eaee170d788df34c106862086af44ba7beee56951807e7161dfab3d5c93ffc8a67c4224da0d855551e0e7c206ec7de05aaf319f9d7906757c7098ab0be160be1e08f57e3ca2f75e37a427700830d29f9cef08968007f1c366c0ed12a75871a9b058a2cea5aafc230a4046a59df3e9d122d6ee1ef2592dd3afc78bee2b2512ee52fa886f6f31518d6d56a0a0a61667b279fe533139fea5622b72464630da13efa9f93a23c39253445d99759c08365ec363870bb8147c0b06d0bc5641afca5d32d5ab4b889cfd62938e5648932ead4570a228eeffa2591ad4ac39c19343bb9e825b454356ef288d5600a8f5f98d7378ac106daef7242d88320401012207be269c4d3234b60f5c1f598af7263040623fb979eb413bcbb91d3f09d4b730e1ec470291852ad050a9bb93767fb27e51ab6c2eaccc316ee5792752afa64a6714bb3d93aab9ebd9a7976fba4d799295c46c3eafbc1af780856b66e39927c4b6e80780d531b70a823464902e4aa532a7503e31739b3369d3f3d7a10d839b4750fac054ad1cfe653746b3911c501ca6d7fa9237c55088340c252123ede3077576d2fa5cbe27a5707d60319bb6933d81e1021cf55afd34b2876b9551e35d515d09dab182cf9bf7c7d8f2eef16c45bff42488bc5a520338c33b2ffa48b8b88a10087bd8638be1ab1a7ce6c99f24ed96064776c24249dd3e11ce324c4174d53255c7132f3bb731e829cd55ff80c38daf7436056b8a702eeeb6239fa34b4098151f808653dd4e34be5e96f8d995c2f9be2af19f6d7a8ed6fe1258cb2352589bd5ad6336443a3f3a0bea7daad3eb9e21a0f67a445fb849d0aa1a9fa239a37f42f5d54811225c5d5d9d8bce08659f27ea20474a652cc1fbc416205b03b2d6f20df5e38f3a4f07d7f0dd5743e0792df2ed6b5d4d3c78a0ae5d4e9d02b04c290e8de8c7b2b85b5155cd450671ae1c805b920a777ea6a599f9ae2f3cf18552f502768150293974c6a6b2a002583168b95c23a3f7fafdc383a4a68a16b93220c2a034d0ae204a9babad4c8ba7336c8088b60e592bb71ee28bdc8a34dc537a8c2bcb9733dc37228ab2ec431862d46085909e0e4ace5dfd72f29f3e3da13e4961065180e4f02400639d5f1c797653210137d997e1a94d2ecbc47f7622be00ef12ae41fcbb526eac3eefd6d319540181587a520091ce3bd6aff04bace9020eab3205f0a023c2fd386afc057b046129fbc2932d77692616aa50dcd5489fd9578826a4a9fca1502837ad2f5281efe67005be464d71c074343ba67eb3a3214b3cbd08cbdc9938d27209790b4a674827459a20067687207e8c1ff70a0d70c4c68cdc14ff198256c16085267bcbb0b8b1715615803fa7a928a0686ae861d91c73f52fd3753df86bf4f1ba51709fa20bc15c6dc43c12bddba8a8b28160fb358197cc54906e6bbd84cffeb27ba1b282fbb13c851642bf091915df5417e5b020f59fcd6ab268edf06b54a80f80418d970515942d3bce4b10740878e05bb5a098dfb5a64d69b9f064a8e924259257a52a909ea4ca8f379bd80303c930ef88cc14e5e7874ec2cd4f855558e16a12662234d6b6580e2cf6939f155ac868c3db2af4322800cd46022c4397e9ac69879e1094a635d1301de99e672793f096b13c05519348b1945717e1221f23aa7976e5b9be8e9ff60fa9a7ed7c8fb216d2c1c2dbf581e8c97f3d9f496b5c688fae7c5468abfb93cff17c3cea3ac9a1278d47223fe1d014b4242c088d358b3962f06f42d83f3060546f5dc563a855b8306a5bffcdee400d71a896d2cafb848e610403d72d413cf246e9d4ec0076350376a34c744fe1bfec378f7b18b8405a424e531bbd9750234dd136240f8c91e765516b9224e717adbf48b4efdb021cbf9452138b08012c3f132126d61fc8498f5f0807b16ee1d907e41931f55bcecfb43a2553e3dbcbe576ba480dde60db9a53b355535db1a45fd61400ba157d76778f395b2b0623f8a46b854a020520990dece418782e07143252a725e3df5fe65aba95402e8588101fa595c90a0faa1773f05af9596ac192a3c19d4a29159947113f8ceb81cec73ee056abe38b126b17b2917312df8a529c0784521bf59625388b8af2d9d4bc99a42ec84119736a797a4da9bf74096f22e6f98b6d1d5d3a395e9b7ac8c2aa76a567161686a891af0d59ea7910ad580e1048f207c8ce5ae9ee6e573795889c1f1725089330424c0fbac06268faaab93b7d96b4c4197da4ab6107f785d920a2dc32c7f3d9092d0df10298ddc46846d474873d83c40c67b29441dd4c198d1283a863f1dc8b446a3073b565e7e4948f3c3993fcc1844425fa76cc5146eefcc2d695ea48aa756a413b88618eeb800819b6e0a6bbd85911d3b3bbf58442f7110aaacfd332a5d1f771b41a7a37e95d83c62fb7529cf5062de38bd75e2f6dcbd2c40bc08cf6685a19ab761fa8395c6b07f5ae5cf9bb700957782a8e3eafae9c3ddd9a7e9be6433c558339df348c601e7a888b10c2eb37767ad6718b4c9c99705439eaef28e17499817cc70428b6ee4d909a836d529be9ffdf05e531f878b65208bf2aad76bb4485d7b94a97d32838f95f22cfbf5ef9f51c48546f559def4b9bcbeb19fb14bcc7141888da6a0e095dafb6437ba2aa2007004bb2c4dfbbfd1d6c266c4aaca2c979750af53c9e95b8124f8f315ef8f844b0c9c2d3e5482cf5bf2a33e7aaf9d1e41f0e567a490a025d38ac3f6855fa7d02f56abe1e31178a7d4e7fd21ca5bee2d3fbeb7b37a9d3833e13a2ff18bb19b1ad3989eb28670fe94aec2382d7a90b823713af4f3ac2ecb3f98321212621bd65eccc7c5ad3c1f49620c896c732fbd2559d26f653597d4b284c9b93b4b60ba293cd39ea61386399c58f47f55ea90e1320e190cd4084e51ba2bf8cf46aaea3ac81cba211e3aa91604c39f67a3811694aab32f294e26b185149ab092a65e84a7c4a7e4097a1cd4f70d05eb22bd233df69638dc13736bcbee9cfeb990b10d45b3ce20e47343275c214c9aa83257260b9210ac1368da9dc62d139a5762e1a7f7a5bf594d0414465de2a0decf0a8d82c50751d00d8e10c0fe3a0098e5ebad4ed23289085a8388cfb26ab11f9e311cce24588c170dcff98cb1033b06842b6c6a7902cfb659707522dccebb1d058a1b482c01f0a8d397ef31b9b1c74d02f80b3be103d0743bc58d54ab08e3df9e87fe3f7bb0c05106236be965b228381a0d1af7e12a28d2df737c9071573cf6a43ac9e5e85ded5389f315b1653ded1aeeccabc8e6061b016e8beb0cb5c444b108a5fb9766e30a3e926bcbd5aca3a9aa9a5fe6fe76e62061c3c490d0dfa5600f8474707ff67e5638dba951adbac84fd307d2db45e44a2549b043b0da7470b85695ced44fbc483") prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) [ 1740.113976][ C0] sd 0:0:1:0: tag#4304 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1740.123022][ C0] sd 0:0:1:0: tag#4304 CDB[20]: ba [ 1740.133864][ T4819] loop3: detected capacity change from 0 to 1054 [ 1740.172061][ T4819] EXT4-fs (loop3): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1740.243137][ T4826] loop3: detected capacity change from 0 to 1054 [ 1740.252957][ T4826] EXT4-fs (loop3): bad geometry: first data block 2304 is beyond end of filesystem (512) [ 1740.274100][ T4831] loop4: detected capacity change from 0 to 1054 [ 1740.290682][ T4831] EXT4-fs (loop4): Invalid log block size: 2048 17:00:23 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000a00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1740.332393][ T4839] loop4: detected capacity change from 0 to 1054 [ 1740.344506][ T4839] EXT4-fs (loop4): Invalid log block size: 2048 [ 1740.355208][ T4835] FAULT_INJECTION: forcing a failure. [ 1740.355208][ T4835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.368573][ T4835] CPU: 0 PID: 4835 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1740.378335][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.388402][ T4835] Call Trace: [ 1740.391697][ T4835] [ 1740.394621][ T4835] dump_stack_lvl+0xd6/0x122 [ 1740.399248][ T4835] dump_stack+0x11/0x1b [ 1740.403409][ T4835] should_fail+0x23c/0x250 [ 1740.407829][ T4835] should_fail_usercopy+0x16/0x20 [ 1740.412859][ T4835] _copy_to_user+0x1c/0x90 [ 1740.417276][ T4835] rng_dev_read+0x2bd/0x630 [ 1740.421865][ T4835] do_iter_read+0x370/0x5d0 [ 1740.426392][ T4835] do_preadv+0x159/0x240 17:00:23 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1740.430671][ T4835] __x64_sys_preadv+0x54/0x60 [ 1740.435382][ T4835] do_syscall_64+0x44/0xa0 [ 1740.439876][ T4835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1740.445827][ T4835] RIP: 0033:0x7feb56411ae9 [ 1740.450293][ T4835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.470001][ T4835] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 17:00:23 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000009000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1740.478418][ T4835] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1740.486432][ T4835] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1740.494403][ T4835] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.502373][ T4835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.510340][ T4835] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1740.518339][ T4835] 17:00:23 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 37) 17:00:23 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:23 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1740.663183][ T4868] loop3: detected capacity change from 0 to 1054 [ 1740.687756][ T4868] EXT4-fs (loop3): bad geometry: first data block 2560 is beyond end of filesystem (512) [ 1740.745300][ T4877] loop3: detected capacity change from 0 to 1054 [ 1740.753648][ T4881] loop4: detected capacity change from 0 to 1054 [ 1740.761155][ T4877] EXT4-fs (loop3): bad geometry: first data block 2560 is beyond end of filesystem (512) [ 1740.787500][ T4881] EXT4-fs (loop4): Invalid log block size: 2304 [ 1740.790267][ T4882] FAULT_INJECTION: forcing a failure. [ 1740.790267][ T4882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.807191][ T4882] CPU: 1 PID: 4882 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1740.816959][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.827013][ T4882] Call Trace: [ 1740.830284][ T4882] [ 1740.833239][ T4882] dump_stack_lvl+0xd6/0x122 [ 1740.837864][ T4882] dump_stack+0x11/0x1b [ 1740.842026][ T4882] should_fail+0x23c/0x250 [ 1740.846443][ T4882] should_fail_usercopy+0x16/0x20 [ 1740.851518][ T4882] _copy_to_user+0x1c/0x90 [ 1740.856000][ T4882] rng_dev_read+0x2bd/0x630 [ 1740.860554][ T4882] do_iter_read+0x370/0x5d0 [ 1740.865258][ T4882] do_preadv+0x159/0x240 [ 1740.869502][ T4882] ? do_preadv+0x1/0x240 [ 1740.873785][ T4882] __x64_sys_preadv+0x54/0x60 [ 1740.878543][ T4882] do_syscall_64+0x44/0xa0 [ 1740.882967][ T4882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1740.888860][ T4882] RIP: 0033:0x7feb56411ae9 [ 1740.893270][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.912874][ T4882] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1740.921315][ T4882] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1740.929308][ T4882] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1740.937372][ T4882] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.945494][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.953547][ T4882] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1740.961559][ T4882] 17:00:23 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000b00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:23 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 38) [ 1740.994590][ T4893] loop4: detected capacity change from 0 to 1054 [ 1741.010003][ T4893] EXT4-fs (loop4): Invalid log block size: 2304 17:00:23 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000a000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1741.126623][ T4906] loop3: detected capacity change from 0 to 1054 [ 1741.154079][ T4909] FAULT_INJECTION: forcing a failure. [ 1741.154079][ T4909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.167286][ T4909] CPU: 1 PID: 4909 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1741.177016][ T4909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.187063][ T4909] Call Trace: [ 1741.190332][ T4909] [ 1741.193271][ T4909] dump_stack_lvl+0xd6/0x122 [ 1741.197878][ T4909] dump_stack+0x11/0x1b [ 1741.202061][ T4909] should_fail+0x23c/0x250 [ 1741.206635][ T4909] should_fail_usercopy+0x16/0x20 [ 1741.211754][ T4909] _copy_to_user+0x1c/0x90 [ 1741.216166][ T4909] rng_dev_read+0x2bd/0x630 [ 1741.220674][ T4909] do_iter_read+0x370/0x5d0 [ 1741.225255][ T4909] do_preadv+0x159/0x240 [ 1741.229623][ T4909] __x64_sys_preadv+0x54/0x60 [ 1741.234343][ T4909] do_syscall_64+0x44/0xa0 [ 1741.238762][ T4909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1741.244654][ T4909] RIP: 0033:0x7feb56411ae9 [ 1741.249093][ T4909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.269142][ T4909] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1741.277575][ T4909] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1741.285560][ T4909] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1741.293620][ T4909] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.301639][ T4909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.309610][ T4909] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1741.317588][ T4909] 17:00:24 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 39) [ 1741.333991][ T4906] EXT4-fs (loop3): bad geometry: first data block 2816 is beyond end of filesystem (512) [ 1741.403935][ T4914] loop3: detected capacity change from 0 to 1054 [ 1741.414616][ T4914] EXT4-fs (loop3): bad geometry: first data block 2816 is beyond end of filesystem (512) 17:00:24 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:24 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000c00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1741.448718][ T4918] loop4: detected capacity change from 0 to 1054 [ 1741.483457][ T4918] EXT4-fs (loop4): Invalid log block size: 2560 17:00:24 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000b000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1741.552937][ T4926] loop4: detected capacity change from 0 to 1054 [ 1741.560567][ T4926] EXT4-fs (loop4): Invalid log block size: 2560 [ 1741.609774][ T4934] FAULT_INJECTION: forcing a failure. [ 1741.609774][ T4934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.622969][ T4934] CPU: 1 PID: 4934 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1741.632699][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.642849][ T4934] Call Trace: [ 1741.646125][ T4934] [ 1741.649121][ T4934] dump_stack_lvl+0xd6/0x122 [ 1741.653715][ T4934] dump_stack+0x11/0x1b [ 1741.657871][ T4934] should_fail+0x23c/0x250 [ 1741.662350][ T4934] should_fail_usercopy+0x16/0x20 [ 1741.667379][ T4934] _copy_to_user+0x1c/0x90 [ 1741.671799][ T4934] rng_dev_read+0x2bd/0x630 [ 1741.676305][ T4934] do_iter_read+0x370/0x5d0 [ 1741.680805][ T4934] do_preadv+0x159/0x240 [ 1741.685114][ T4934] __x64_sys_preadv+0x54/0x60 [ 1741.689788][ T4934] do_syscall_64+0x44/0xa0 [ 1741.694902][ T4934] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1741.700789][ T4934] RIP: 0033:0x7feb56411ae9 [ 1741.705199][ T4934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.724919][ T4934] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1741.733338][ T4934] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1741.741304][ T4934] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1741.749268][ T4934] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:24 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 40) [ 1741.757281][ T4934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.765270][ T4934] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1741.773246][ T4934] 17:00:24 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) 17:00:24 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) dup3(r0, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000280)=r4, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1741.883795][ T4939] loop3: detected capacity change from 0 to 1054 [ 1741.902812][ T4939] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (512) [ 1741.951872][ T4945] loop3: detected capacity change from 0 to 1054 [ 1741.960545][ T4945] EXT4-fs (loop3): bad geometry: first data block 3072 is beyond end of filesystem (512) [ 1741.980982][ T4953] loop4: detected capacity change from 0 to 1054 [ 1741.983137][ T4952] FAULT_INJECTION: forcing a failure. [ 1741.983137][ T4952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.000651][ T4952] CPU: 1 PID: 4952 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1742.010367][ T4952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.020411][ T4952] Call Trace: [ 1742.023683][ T4952] [ 1742.026607][ T4952] dump_stack_lvl+0xd6/0x122 [ 1742.031197][ T4952] dump_stack+0x11/0x1b [ 1742.035363][ T4952] should_fail+0x23c/0x250 [ 1742.039785][ T4952] should_fail_usercopy+0x16/0x20 [ 1742.045033][ T4952] _copy_to_user+0x1c/0x90 [ 1742.049506][ T4952] rng_dev_read+0x2bd/0x630 [ 1742.054014][ T4952] do_iter_read+0x370/0x5d0 [ 1742.058592][ T4952] do_preadv+0x159/0x240 [ 1742.062872][ T4952] __x64_sys_preadv+0x54/0x60 [ 1742.067546][ T4952] do_syscall_64+0x44/0xa0 [ 1742.072040][ T4952] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1742.077931][ T4952] RIP: 0033:0x7feb56411ae9 [ 1742.082333][ T4952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.102259][ T4952] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1742.110723][ T4952] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1742.118792][ T4952] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1742.126769][ T4952] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.134745][ T4952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.142742][ T4952] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1742.150795][ T4952] [ 1742.165817][ T4953] EXT4-fs (loop4): Invalid log block size: 2816 17:00:24 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000d00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:24 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 41) 17:00:24 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000c000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1742.209364][ T4965] loop4: detected capacity change from 0 to 1054 [ 1742.218039][ T4965] EXT4-fs (loop4): Invalid log block size: 2816 [ 1742.481373][ T4976] FAULT_INJECTION: forcing a failure. [ 1742.481373][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.494542][ T4976] CPU: 1 PID: 4976 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1742.504259][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.514309][ T4976] Call Trace: [ 1742.517600][ T4976] [ 1742.520538][ T4976] dump_stack_lvl+0xd6/0x122 [ 1742.525180][ T4976] dump_stack+0x11/0x1b [ 1742.529332][ T4976] should_fail+0x23c/0x250 [ 1742.533753][ T4976] should_fail_usercopy+0x16/0x20 [ 1742.538851][ T4976] _copy_to_user+0x1c/0x90 [ 1742.543367][ T4976] rng_dev_read+0x2bd/0x630 [ 1742.547889][ T4976] do_iter_read+0x370/0x5d0 [ 1742.552532][ T4976] do_preadv+0x159/0x240 [ 1742.556794][ T4976] __x64_sys_preadv+0x54/0x60 [ 1742.561466][ T4976] do_syscall_64+0x44/0xa0 [ 1742.565900][ T4976] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1742.571845][ T4976] RIP: 0033:0x7feb56411ae9 [ 1742.576262][ T4976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.595944][ T4976] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1742.604432][ T4976] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1742.612746][ T4976] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1742.620713][ T4976] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:25 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) (fail_nth: 42) [ 1742.628681][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.636705][ T4976] R13: 00007fff93f06acf R14: 00007feb54188300 R15: 0000000000022000 [ 1742.644676][ T4976] [ 1742.655404][ T4980] loop3: detected capacity change from 0 to 1054 17:00:25 executing program 1: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000280)=r5, 0x1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000200)={{r2}, 0x7, &(0x7f0000000080)=[0x59, 0x9, 0xace2, 0x8, 0x2, 0x5, 0xffffffffffffffc0], 0x6, 0x0, [0xffffffffa36c389d, 0x5, 0x1, 0x1]}) preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/196, 0x20000184}], 0x1, 0x0, 0x0) [ 1742.685434][ T4984] loop4: detected capacity change from 0 to 1054 [ 1742.701247][ T4980] EXT4-fs (loop3): bad geometry: first data block 3328 is beyond end of filesystem (512) [ 1742.721191][ T4984] EXT4-fs (loop4): Invalid log block size: 3072 [ 1742.761979][ T4987] loop4: detected capacity change from 0 to 1054 [ 1742.768753][ T4987] EXT4-fs (loop4): Invalid log block size: 3072 [ 1742.781827][ T4993] loop3: detected capacity change from 0 to 1054 [ 1742.788550][ T4993] EXT4-fs (loop3): bad geometry: first data block 3328 is beyond end of filesystem (512) 17:00:25 executing program 3: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000e00000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) 17:00:25 executing program 4: r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x83c00, 0x6, &(0x7f0000000540)=[{&(0x7f0000010000)="200000000002000019000000600100000f00000000000000000d000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0xfeb1, 0x640}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f00000000c0)="80810000007f", 0xfc3b, 0x1600}], 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c0073a9f0ed79c318771549b9511cc46c5df260066b234d84d7166435e14a30d71a0f94d62836c31693faefc7bdb578f3405713fda670d95c63d7c875630304e38179ee3f90fb26cdb8807c0087452b8aacfb1600"]) [ 1742.881023][ T5006] FAULT_INJECTION: forcing a failure. [ 1742.881023][ T5006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.894369][ T5006] CPU: 1 PID: 5006 Comm: syz-executor.2 Tainted: G W 5.15.0-syzkaller #0 [ 1742.904107][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.914238][ T5006] Call Trace: [ 1742.917546][ T5006] [ 1742.920471][ T5006] dump_stack_lvl+0xd6/0x122 [ 1742.925084][ T5006] dump_stack+0x11/0x1b [ 1742.929238][ T5006] should_fail+0x23c/0x250 [ 1742.933656][ T5006] should_fail_usercopy+0x16/0x20 [ 1742.938708][ T5006] _copy_to_user+0x1c/0x90 [ 1742.943127][ T5006] rng_dev_read+0x2bd/0x630 [ 1742.947717][ T5006] do_iter_read+0x370/0x5d0 [ 1742.952221][ T5006] do_preadv+0x159/0x240 [ 1742.956466][ T5006] __x64_sys_preadv+0x54/0x60 [ 1742.961224][ T5006] do_syscall_64+0x44/0xa0 [ 1742.965846][ T5006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1742.971738][ T5006] RIP: 0033:0x7feb56411ae9 [ 1742.976145][ T5006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.995839][ T5006] RSP: 002b:00007feb54188188 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1743.004418][ T5006] RAX: ffffffffffffffda RBX: 00007feb56524f60 RCX: 00007feb56411ae9 [ 1743.012378][ T5006] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1743.020344][ T5006] RBP: 00007feb541881d0 R08: 0000000000000000 R09: 0000000000000000 17:00:25 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000000)) r1 = io_uring_setup(0x233b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r2 = dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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